The Court of Justice of the European Union (CJEU) has ruled that not all ‘legitimate interests’ can be used to justify the processing of an individual’s personal data, even when a public authority has deemed such processing “necessary”…