The Portuguese Parliament has finally approved a new Data Protection Act. Although the bill waits for the promulgation of the President of the Republic, it is expected to be enacted promptly. In this context, it is relevant to conduct an overview of its main elements, giving the scholars, practitioners, and other professional the opportunity to know the fundamental options adopted by the Portuguese legislator.
When relying on legitimate interest as a legal basis for processing personal data, the controller should conduct a Legitimate Interest Assessment (LIA). This assessment is meant to balance the controller’s legitimate interests, and the necessity of processing the personal data, and the interests, rights, and freedoms of the individual.
In this article, we explain how to conduct an LIA in a general manner.
Op-eds in the Press
Writen in Portuguese