There is a lot of confusion over what exactly qualifies as "legitimate interest" under GDPR. Additionally, you may be wondering whether GDPR governs the handling of personal data which you collected before GDPR went into effect and, if so, whether you can keep it under the legitimate interest test. The answer is both 'yes' and 'no'. Below we talk about the legitimate interest test generally, and how it applies to data acquired before GDPR went into effect. We also include information about how to obtain the model legitimate interest assessment (LIA) template which has been developed by a GDPR expert and which we have been given permission to share.
