Obligations & assessments
Legitimate interests assessment
LIA
GDPRGDPR Art. 6(1)(f)
A documented three-part test a controller runs before relying on legitimate interests: is the purpose legitimate, is the processing necessary for it, and do the person's interests and rights override it? The EDPB has said this basis can work for developing and deploying AI models when the test is met.