The introduction of legitimate interest as a basis for processing data is a commendable imitative by the drafters of the Nigeria Data Protection Act, 2023. This provision offers flexibility for controllers and processors, enabling a pragmatic approach to address various situations where explicit consent may not be suitable.
However, striking a balance between meeting legitimate needs and respecting the rights of data subjects demands thoughtful consideration. This article delves into the significance of legitimate interest in sustaining an equilibrium between individual privacy and the interests of processors.
