# Legitimate interest assessment
> Source: https://legalcode.md/skills/legalcode-legitimate-interest-assessment | [HTML version](https://legalcode.md/skills/legalcode-legitimate-interest-assessment)

Conduct a three-part Legitimate Interest Assessment (LIA) under GDPR Art. 6(1)(f), UK GDPR, and Swiss FADP (nDSG).

Conduct a three-part Legitimate Interest Assessment (LIA) under GDPR Art. 6(1)(f), UK GDPR, and Swiss FADP (nDSG). Use when evaluating whether a controller's legitimate interest can lawfully ground processing under the Purpose test (is the interest lawful, clearly articulated, real and present?), the Necessity test (is processing strictly necessary and proportionate?), and the Balancing test (do controller interests outweigh data subject rights?). Also use when documenting LIA records for supervisory authority review, assessing direct marketing, fraud prevention, employee monitoring, profiling, intra-group transfers, network security, or any other processing relying on Art. 6(1)(f). Covers UK Recognised Legitimate Interests (DUA Act 2025) and Swiss Art. 31(1)(b) FADP overriding private interest. Produces a structured, auditable LIA documentation package with GREEN/YELLOW/RED per-test classification, APPROVED/CONDITIONAL/REJECTED overall outcome, remediation plan, and Glass Box audit trail.

This skill conducts a complete, structured Legitimate Interest Assessment for any proposed processing activity relying on Art. 6(1)(f) GDPR as its lawful basis. **This skill covers:** - The three-part LIA test — Purpose, Necessity, and Balancing — applied sequentially - Classification of each test component (GREEN / YELLOW / RED) and overall outcome (APPROVED / CONDITIONAL / REJECTED) - UK GDPR parallel analysis including Recognised Legitimate Interests (Data (Use and Access) Act 2025, Schedule 4/Annex 1) - Swiss FADP/nDSG Art. 31(1)(b) overriding private or public interest justification - Legitimate interest taxonomy — which categories of interest pass the purpose test - Necessity stress-testing — minimum data, minimum means, minimum retention - Balancing matrix — four EDPB-aligned factors (rights/freedoms, impact, expectations, safeguards) - Safeguards catalogue — measures that can tip the balance in the controller's favour - Alternative lawful basis assessment — if LIA fails, identify viable fallback - Remediation plan for CONDITIONAL outcomes - Auditable LIA record suitable for supervisory authority review and data subject requests - ROPA update guidance (Art. 30) and privacy notice disclosure requirements (Arts. 13/14) - DPIA trigger assessment — when a positive LIA also requires a DPIA **This skill does not:** - Provide legal advice ...

## Jurisdictions

Global



---
*Legalcode -- legalcode.md*