21
Thu, Nov
45 New Articles

The Court of Justice of the European Union (“CJEU”) has recently rendered a significant judgement regarding the interpretation of legitimate interest as a legal basis for personal data processing. Deciding on a case involving the fine imposed by the Dutch data protection authority (“AP”) on the Royal Dutch Tennis Association (“KNLTB”) for sharing its members’ personal data for commercial purposes, the CJEU confirmed that legitimate interest can cover purely commercial interests. This decision is important for both EU member states and Serbia, where there is still no clear practice or opinion from the competent authorities on the lawful application of data processing based on legitimate interest.

The General Secretariat of the Belgian data protection authority has published an informational booklet outlining the relationship between the EU General Data Protection Regulation and the Artificial Intelligence Regulation, which came into force on 1 August 2024. The authority’s aim with the informational booklet is to provide insights into the application of data protection requirements during the development and deployment of artificial intelligence systems. Data protection requirements and legal standards are key to ensure that artificial intelligence systems operate ethically, responsibly and lawfully.

More Articles ...