How to Pitch and Remain GDPR Compliant

‘Legitimate Interest’ is the principle on which data is shared in Roxhill; because of that, you MUST ONLY contact a journalist with relevant information.

There is a legitimate relationship/interest between PRs and journalists, and, as such, PRs do not need to seek permission to hold the personal data of each journalist. But, before engaging with journalists, PRs do have to have assessed the Lawful Basis they are using under GDPR to process data. This needs to be documented in their publicly available Privacy Policy

Your approach must be tailored to the journalists’ needs. A generic press release sent to every media correspondent will be an instant delete. As a PR, you need to be able to describe why you have a legitimate relationship in your ‘Privacy Policy’.