Get Free Downloads
Start your GDPR today in just a few clicks
Get Free Downloads
Start your GDPR today in just a few clicks

GDPR Risk Of Buy-in Data

by Adam Brogden
in Blog

14-Jun-2019 11:04

If you are buying-in data to use in your marketing campaigns then you need to be very careful. GDPR and PECR mean that for marketing companies consent is probably your only totally safe lawful basis to process a persons data, if you are buying in data then you are going to be relying on legitimate interest as your lawful basis.

Assessing where legitimate interest is a reasonable lawful basis is about balance. It’s about considering the rights of a company to run their business and make a profit against the rights and freedoms of the data subjects involved. In most cases the rights of the individual are going to win. The rights of a company to make a profit is considered almost trivial and certainly won’t stand up again the rights of a person not to get spammed.

If you plan to make live marketing calls you MUST screen against TPS and your own opt-out list. Failure to do this is likely to result in complaints and enforcement action from the ICO.

For more information take a look at the ICO’s guide to marketing lists or download the PECR guide.

If you have any questions please feel free to call.

Good luck all.