The public consultation [1] of the European Data Protection Board (EDPB) on processing of personal data based on ‘legitimate interest’ [2] will end on Wednesday 20 November. It is an important consultation in light of the tennis association ruling by the Court of Justice of the European Union [3] and the misuse by ad companies and other data traders of legitimate interest as a legal base for processing of personal data under the GDPR.
Contrary to what some may think, the CJEU-ruling does not open the door to sports associations and other organisations selling personal data without the consent of data subjects.
Notes:
[1] Consultation page EDPB with documents.
[2] Article 6(1)(f) GDPR.
[3] Judgment of 4 October 2024, ECLI:EU:C:2024:857.

