Legitimate interest is another lawful basis for processing under the new GDPR.
Processing an individual’s personal data on the grounds of legitimate interest, is likely to be most appropriate when used in a way the individual would reasonably expect, would have a minimal impact on their privacy and/or there is a compelling justification to do so.
All you need to know on accounting due diligence and compliance
Find out the proven paths to grow from successful businesses
Say no to risky relationships, keep your business protected
Get greater insight to make quick and informed business decisions
©2026 Experian Information Solutions, Inc. All rights reserved.
Experian Ltd is authorised and regulated by the Financial Conduct Authority (firm reference number 738097). Experian Ltd is registered in England and Wales (no. 00653331). Registered office: The Sir John Peace Building, Experian Way, NG2 Business Park, Nottingham NG80 1ZZ.