Extract to table

Each entity within the NTP Group that acts as a data controller in respect of a processing activity relying on legitimate interest is required to complete an LIA using this template for each such processing activity

Article 6(1), second sub-paragraph, provides that legitimate interest under point (f) shall not apply to processing carried out by public authorities in the performance of their tasks

A separate condition under Article 9(2) must be identified and satisfied in addition to the Article 6 lawful basis

If a processing activity involves special category data, the business unit data steward completing the LIA must escalate the matter to the DPO for further analysis

Again, any processing activity involving criminal offence data must be escalated to the DPO for separate assessment

The data steward must consult with the DPO during the drafting process and must not finalise or approve an LIA without the DPO's review