Game over for misuse of legitimate Interest as a lawful basis for analytics and data monetisation?
The narrow scope of what constitutes a legitimate interest of a controller to re-purpose and monetise customer personal data was clearly re-stated recently by the Dutch data protection authority (the 'AP') when it fined the Royal Dutch Lawn Tennis Association ('KNLTB') €525,000 for unlawfully sellin