Demonstrating Legitimate Interests

In plain language

If you justify recording people based on your 'legitimate interests' (like protecting your property), you must prove it is necessary, serves a real purpose, and does not unfairly invade people's privacy.

Requirement as structured

When relying on legitimate interests as a legal basis for drone operations, the data controller must be able to demonstrate that the processing is genuinely in their interest, necessary for their purpose, and does not disproportionately impact the privacy of the individuals recorded.

Original regulatory text

When relying on legitimate interests as a legal basis to utilise drones, the data controller should be able to demonstrate that:  It is genuinely in their interests to do so  That it is necessary to achieve their identified purpose(s)  That it does not have a disproportionate impact on the individuals whose personal data will be processed, by way of having a minimal impact on their privacy or by virtue of the nature of the processing or the safeguards introduced.