Necessity / necessity test

The legal "necessary" as used in the GDPR is not absolute indispensability, but a test of proportionality and subsidiarity: is the aim proportionate to the disadvantages, and could the aim be achieved in a less intrusive way. Note what is actually tested: not whether a public-interest task, a contract or a legitimate interest is necessary, but whether the processing is necessary for it.

Questions about what this term means for your organisation? Contact Mr. Dr. Vlieger.