Meeting minutes
Legal Bases
OfficialAuthorityOfController for legal basis based on GDPR Art.6-1-e
Note that official authority is derived from from law granting the authority
PublicInterest as concept (agreed in previous meeting)
Legitimate Interest
Whose legitimate interest? Controller, Third Party, Data Subject
Can there be a legitimate interest of the data subject? Can it exist without legitimate interest of the controller? e.g. data co-operative
How to distinguish between legitimate interest of controller vs third party?
Proposal: have LegitimateInterest as class, with subclasses for Controller and ThirdParty
Proposal: use hasController to indicate legitimate interest of a third party i.e. legitimate interest -- hasController --> third party
Next meeting
In 2 weeks, usual schedule
19 May 13:00 WEST / 14:00 CEST
Paul has volunteered to submit proposals for Safeguard concepts