Legitimate Interests Exception (Deployment Context)
Is this legally binding?
Guidance. Voluntary guidance. Best practice, not obligation, until a contract or a regulator cites it.
GUIDANCE interpreting binding PDPA First Schedule Part 3: organisations may process personal data without consent for legitimate interests, e.g. using personal data in an AI System to detect or prevent illegal activities, where those interests outweigh adverse effects; reliance must be disclosed to individuals.
What this connects to
2 relations. Official relations are the ones the source documents state; anything marked GAGE analysis is our reading, not an agency's.
Part of1
- ObligationCollection, Use and Disclosure Without Consent (s 17; Schedules)Binding
Guideline interprets binding PDPA provision; guideline itself is not legally binding
Cited by1
- SectionPart IV, Deployment: Collection and Use of Personal Data in AI SystemsGuidance
Structural decomposition of the source instrument
Verified against the official source on 2026-08-17. GAGE is not affiliated with or endorsed by any agency named here, and nothing on this page is legal advice. How this is built and checked.