thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Legitimate Interests

GDPR lawful basis allowing processing necessary for a legitimate interest unless overridden by the data subject's rights.

Definition

Reliance on legitimate interests requires a three-part test, often documented as a legitimate interests assessment: purpose test, necessity test, and balancing test. It cannot be used by public authorities for their tasks. Data subjects have the right to object to processing based on it.

Example

A company uses legitimate interests to process network logs for fraud prevention and security.

Exam tip

Document the balancing test; the right to object applies.

Related terms