CNIL, re-use of data: even a compatible purpose needs a lawful basis and information to people (CNIL, 'Ensuring the lawfulness of the data processing - In case of re-use of data, carrying out the necessary additional tests and verifications', 7 June 2024 (courtesy translation))
The CNIL reads the compatibility test as one step and the lawful basis (for a holder, normally legitimate interests) as another, with people informed in both cases. This is stricter than the plain wording of recital 50, so a holder in France should do both.
Dated 18 Oct 2026Source checked 18 Oct 2026Basis: primary text
In the source's own words
“Please note: even when the further processing is compatible, a valid legal basis must always be identified and the data subjects informed, in particular in order to be able to exercise their rights.”
Where it was read
Also read from the same source
- CNIL, re-use of data: the compatibility test covers sharing with third parties (CNIL, 'Ensuring the lawfulness of the data processing - In case of re-use of data, carrying out the necessary additional tests and verifications', 7 June 2024 (courtesy translation))
- CNIL, data acquired from a third party: the supplier must check compatibility and may set the limits by licence (CNIL, 'Ensuring the lawfulness of the data processing - In case of re-use of data', 7 June 2024, section on datasets acquired from a third party)
- CNIL, re-use of data: the research presumption and why machine learning is not 'statistical' (CNIL, 'Ensuring the lawfulness of the data processing - In case of re-use of data', 7 June 2024 (courtesy translation))
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide