Does anyone know if there is any provision in the GDPR that allows or disallows private collection of data for internal research? I understand that GDPR has provisions like "the right to be forgotten" -- we do process removal requests so the data is not available publicly.
Conversation
Replying to
GDPR'S Legitimate Interest justification is the most flexible approach and most likely to suit you.
You still take on a lot of responsibility as a data controller. And once your legitimate interest ceases to exist, you're obliged to delete.
1
3