How does “public interest” rarely apply to marketing?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
The public task basis under GDPR Article 6(1)(e) is designed for government bodies, public authorities, and organizations carrying out official functions. It lets them process personal data when that processing is necessary for the task they're performing in the public interest.
For commercial email marketers, this basis essentially never applies. Sending a newsletter, running a promotional campaign, doing lead generation: none of these are tasks performed in the public interest as GDPR defines it. The basis exists to cover things like the census, public health surveillance, or regulatory oversight.
Where marketers sometimes get confused: they conflate public interest with socially beneficial work. A non-profit doing good work, a B-Corp with an ethical mission, a company raising awareness about an important issue. That still doesn't qualify. GDPR's public task basis is about official authority, not good intentions.
If you work in a sector with genuine regulatory functions (a regulated financial services firm with statutory reporting obligations, a public health body, a government-adjacent agency), there may be narrow circumstances where public task applies. In those cases, your legal team should define the specific task and the legal basis for it.
For the vast majority of email senders, the relevant bases are consent and legitimate interest. See the full overview of GDPR lawful bases to understand all six options.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.
