dave on Nostr: According to Article 6 paragraph 1 lit f of the GDPR, processing of personal data ...

According to Article 6 paragraph 1 lit f of the GDPR, processing of personal data based on legitimate interests must be carried out in a way that does not disproportionately interfere with the rights and freedoms of those whose data is being processed. Furthermore, the controller must assess whether their legitimate interests could be overridden by the interests or fundamental rights of the data subjects in question. When deciding whether to disclose a person’s birth date amongst their colleagues, it is important to consider whether doing so could interfere with their rights and potential affect their privacy and security. If the interests of the data subject override the legitimate interests of the controller, then the data should not be disclosed without the explicit consent of the data subject.