GDPR & Legitimate Interest

Megan Girvalo 2

---

Would anyone be willing to share their policies/processes related to Legitimate Interest and how they manage this in RE? We are currently reviewing ours and since this area seems a bit more open to interpretation than others, we are looking for insight/other ideas/best practices. Thanks in advance! 

Elizabeth Perron

Moved to RE community to have more eyes and hopefully more answers for this question.


Blackbaud Community Management Team

Phillip Bicknell

Four instances of "legitimate" in our Privacy Policy:
https://www.league.org.uk/privacy-policy

And we use Attributes and Consent Module to record/control what we need, plus Actions for any constituent correspondence. A bit like quality control, as long as you document and act in good faith, you're allowed to make the odd mistake.


We have opt in/out per channel (post, email, phone, sms) for general consent, plus much lesser-used ones for fundraising, newsletter (we also post our magazine online), invitations (events; some supporters are house-bound), gaming (lottery, raffle), merchandise, legacy asks. But the only ones we put on our materials and website are email, phone and sms, albeit with a message giving supporter care contact details for more refined consent wants/needs.

Graham Kelly

@Megan Girvalo I know your post was in 2019 but can you offer me advice on how you use the consent tables to record legitimate interest? We previously relied on consent for all channels but are moving to legitimate interest for post. I'm thinking we could just use the 'opt-in' option and then show our legitimate interest statement in the 'consent statement' box. But it jars that it will look like we are still relying on opt-in consent.

Megan Girvalo 2

@Graham Kelly We are using a combination of Consent Module and a Constituent attribute. Consent for all explicit opt in/opt outs.. and anyone outside of the explicit consent that meets legitimate interest based on our privacy policy (engaged via donation or event recently) gets flagged with an attribute to say they meet the criteria of Legitimate Interest. We run regular checks to remove the L.I. flag form records if they don't engage after a certain amount of time.

Graham Kelly

@Megan Girvalo thanks Megan that's very helpful. I will share with colleagues and come back to you if I may with any further questions!