GDPR Article 6(1)(f): legitimate interests as a lawful basis (Regulation (EU) 2016/679, Art 6(1)(f))
This is the lawful basis a holder would normally rely on to license its own records. It works only if the holder can show the licence is necessary for a real interest and that the people in the records do not override it.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.”
Where it was read
Also read from the same source
- GDPR Article 5(1)(b): purpose limitation (Regulation (EU) 2016/679, Art 5(1)(b))
- GDPR Article 6(4): compatibility test for a new purpose (Regulation (EU) 2016/679, Art 6(4))
- GDPR Recital 50: further processing and the legal basis (Regulation (EU) 2016/679, recital 50)
- GDPR Article 9(1): special categories of personal data (Regulation (EU) 2016/679, Art 9(1))
- GDPR Article 13(3): telling people before a new purpose (Regulation (EU) 2016/679, Art 13(3))
- GDPR Article 14(5)(b): disproportionate effort (Regulation (EU) 2016/679, Art 14(5)(b))
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in these 3 guides