Case Law · CJEU EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Judgment
Full text
In Section II (entitled ‘Criteria for making data processing legitimate’) of Chapter II of Directive 95/46, Article 7 provides: ‘Member States shall provide that personal data may be processed only if: ... (f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by the third party or parties to whom the data are disclosed, except where such interests are overridden by the interests [or] fundamental rights and freedoms of the data subject which require protection under Article 1(1).’
How it connects
References
Related across sources
Guidelines 2/2019 processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects 1 Adopted Guidelines 2/2019 on the processing of personal data under Article 6(1)(b) GDPR in the context of the provision of online services to data subjects Version 2.0 8 October… Guidelines Oct 16, 2019 Personal Data Processing Child Consent
Opinion 28/2024 certain data protection aspects related to the processing of personal data in the context of AI models Opinion Dec 18, 2024 Personal Data Processing Data Governance for AI
Guidelines 2/2018 derogations of Article 49 under Regulation 2016/679 Guidelines on derogations of Article 49 Guidelines May 25, 2018 Privacy Shield Lawful Basis Legitimate Interest
Guidelines 3/2019 processing of personal data through video devices Guidelines Jan 30, 2020 Personal Data Processing Material scope (GDPR)
Guidelines 9/2022 personal data breach notification under GDPR Guidelines Apr 4, 2023 Notification Obligation Data Breaches Personal Data