Image credit: shutterstock.com/iiiphevgeniy

The Dutch battle over legitimate interests

Recent enforcement by the Dutch data protection authority has cemented its restrictive interpretation of the GDPR’s “legitimate interests” provision, leading to a clash between the regulator and those who say the decision contradicts the text of the landmark law.