Records Management

Legitimate interest

Using legitimate interests as a legal basis for processing personal data.

This guidance is for any member of University staff tasked with determining the legal basis for processing personal data who decides to use ‘legitimate interest’.

You will need to use this guidance:

  • When customising a privacy notice to ensure it complies with current data protection legislation.
  • When conducting a ‘data protection impact assessment’ (DPIA).
  • When otherwise collecting or receiving personal data for a new initiative.