Legitimate interests assessment
- Art. 6 Abs. 1 lit. f DSGVO Open in the law texts
- EDPB Leitlinien 1/2024
Does Art. 6(1)(f) GDPR hold? Three-step test under EDPB Guidelines 1/2024: legitimate interest, necessity and a weighted balancing of children, Art. 9 data, expectations and safeguards.
Art. 6(1)(f) GDPR allows processing when three conditions are met cumulatively: a legitimate interest, the necessity of the processing for it, and a balancing test showing that the interests, fundamental rights and freedoms of the data subjects do not override it. The assessment follows EDPB Guidelines 1/2024. The result is a reasoned estimate you must document and stand behind.