Hacker News Reader

Typically legitimate interest is used where consent isn’t an applicable basis (e.g. for processing a user’s address details in an online checkout).

The fact that the BBC have chosen to add consent options to a purported legitimate interest is a hint that they’re trying to confuse the user.

View on HN

> Typically legitimate interest is used where consent isn’t an applicable basis (e.g. for processing a user’s address details in an online checkout).

Nope, that'd be the "contract" basis (i.e. this information is strictly necessary for the user's intended task).

Legitimate interest is for non-essential data that it is, somehow, in the user's best interest to gather. But convincing a judge of that data being in the user's best interest is a...tricky bar to clear.

> The fact that the BBC have chosen to add consent options [...] is a hint that they’re trying to confuse the user.

Yes, just another dark pattern which you see so often with those cookie banners.

Reply on news.ycombinator.com