How can marketers navigate the details of the incoming GDPR to avoid legitimate interest pitfalls? In Recital 47 of the GDPR, legitimate interest is described as ‘processing of personal data for direct marketing purposes’, but these words have created the common misunderstanding that this means all marketing and even soft opt-ins. Guy Hanson says this is not the case and not all email marketing or all sending of direct marketing material is permitted. Here’s what the wording doesn’t say.