The rules applicable to public authorities must ensure public interest, efficiency and effectiveness. For this, a cross-sectional understanding must be developed of when data processing is to be considered permissible in the overriding public interest.

In the GDPR, the public interest in data processing is only regulated in a very incoherent and unsystematically scattered manner [Tiles P]. In order to increase legal certainty, concrete, nationally uniform authorisation criteria for data processing in the public interest should be created.