CJEU C-621/22 KNLTB (legitimate interests) 4 Oct 2024
members
–
3 min read
Under Article 6(1)(f) you can disclose personal data for a commercial interest if the processing is strictly necessary and not outweighed by the data subjects' interests, rights or freedoms. The interest doesn't have to be determined by law, but it must be lawful. And CJEU nudges consent again.