Brussels Privacy Hub has organised a workshop on “Lawful Bases for Personal Data Processing on Social Networks” on 6 October 2022. High-level data protection experts from academia, data protection authorities, EU institutions and NGOs were invited to the workshop. The workshop was chaired by Prof. Dr. Gianclaudio Malgieri, co-director of the Brussels Privacy Hub. The workshop was organized following the discussions on defining the lawful basis for social-media related (especially for online targeted or personalised advertising) personal data processing.
The meeting was informal and off the record, and all participants spoke in their personal capacity. The following report reflects issues and themes which were brought up during the discussion and which deserve further consideration. The report has been drafted based on the real-time notes that the Brussels Privacy Hub team have taken on the spot.
The workshop was organized into 3 main chapters, followed by a case study and a debriefing, which focused on exchanging views and thoughts about the most appropriate lawful bases for personal data processing in the context of social networks.
This report aimed to deliver the main outcomes and discussion points for the three main chapters, as the case study and the debriefing were extra exercises, departing from the main subheadings of the workshop.
The 3 main chapters of the workshop were titled as stated below:
- “Consent vs Legitimate Interest: Which one is the best?”, (One full session focusing on consent, the second focusing on legitimate interest),
- “Contract: A suitable legal basis?”
- “Sensitive Data and Vulnerable People”.
You can read the report from the link below.