Tools Checklists Legitimate interests assessment
Legitimate interests assessment Conditions Data protection Run the three-part test for UK GDPR Art 6(1)(f), after first checking whether the purpose is a recognised legitimate interest that needs no balancing test.
How to use this checklist
Each item summarises one requirement, and the basis under it names the provision. The instrument pages set out each
provision in full. Ticks are kept in this browser only.
Step 0: recognised legitimate interests screen If Annex 1 covers the purpose, stop here and record the Annex 1 condition relied on.
Checked Annex 1: if the purpose is a recognised legitimate interest (for example national security, emergencies, crime prevention or safeguarding), Art 6(1)(ea) applies and no balancing test is needed UK GDPR Art 6(1)(ea), Art 6(5), Annex 1 (in force 2026-02-05) Purpose test The interest is identified, specific and lawful, and is the controller's own or a third party's UK GDPR Art 6(1)(f) The benefit of the processing is articulated, not assumed UK GDPR Art 6(1)(f) Necessity test The processing is necessary for that interest: no less intrusive way would reasonably achieve it UK GDPR Art 6(1)(f); Art 5(1)(c) Only the data needed is used UK GDPR Art 5(1)(c) Balancing test People would reasonably expect the processing in this context UK GDPR Art 6(1)(f) Impact on people assessed, with particular weight where children are involved UK GDPR Art 6(1)(f) Safeguards in place to reduce impact, including transparency and an easy way to object UK GDPR Arts 13, 14 and 21 If a public authority: the processing is not in performance of its tasks (Art 6(1)(f) is not available for that) UK GDPR Art 6(1), final subparagraph Result: Tick the items that apply.