Comment on Should I worry about "legitimate interest" tracking cookies?

shadycomposer@lemmy.world ⁨11⁩ ⁨months⁩ ago

• splendoruranium@infosec.pub ⁨11⁩ ⁨months⁩ ago

  Legitimate interest is their interest, not yours.

  The interest might be theirs but the “legitimate” part absolutely has to incorporate a written justification somewhere within the the depths of the mandated records of processing activities that explains why the business/institution couldn’t possibly do what they’re doing without processing that particular piece of user data. “I want that” is not legitimate interest in the sense of Article 6.

  source

  • shadycomposer@lemmy.world ⁨11⁩ ⁨months⁩ ago

    Agree. But practically they may claim using such data to improve their systems. This is a valid LI justification. But still it provides no benefits to users to whom those data are collected from, while at the same time increases their risks (such as mishandling of their data - which is common since it’s very difficult to handle data 100% correctly).

    source