https://ico.org.uk/media/about-the-ico/documents/2615156/adtech-real-time-bidding-report-201906.pdf
ICO annual report 2018-2019
ICO Legitimate Interest Assessment
Balancing test guidance by the UK DPA:
https://ico.org.uk/media/2258435/gdpr-guidance-legitimate-interests-sample-lia-template.docx
What breaches do you need to notify the ICO about?
with a special emphasis on Recital 85:
“A personal data breach may, if not addressed in an appropriate and timely manner, result in physical, material or non-material damage to natural persons such as loss of control over their personal data or limitation of their rights, discrimination, identity theft or fraud, financial loss, unauthorised reversal of pseudonymisation, damage to reputation, loss of confidentiality of personal data protected by professional secrecy or any other significant economic or social disadvantage to the natural person concerned.”