DPN Legitimate Interests Guidance – GDPR (Version 2.0)

In-depth Legitimate Interests Guidance

We have updated the Guidance we originally published in July 2017. This version (published in April 2018) includes several case studies and an example of a Legitimate Interests Assessment (LIA).  We have also added some new short examples and enhanced the LIA template. The main body of the guidance has not been significantly changed.

The Guidance, is a practical tool aimed at helping commercial and not-for-profit organisations to assess whether or not they can rely on Legitimate Interests as a lawful basis for processing personal data under the GDPR.

The Guidance has been made possible by contributions from Bristows LLP, the Direct Marketing Association, ISBA, the IAB, the Institute of Fundrasing, the IPA, Balfour Beatty, Driftrock, Epsilon, Harte Hanks, Member 360  and other representatives of some of the largest companies and institutions in the UK.


The Guidance covers:

  • Understanding what Legitimate Interests are
  • Identifying areas of processing where Legitimate Interests may apply
  • The Legitimate Interests Assessment (LIA) – the 3 stage test
  • Transparency and the consumer