Description
What the report contains
You already have your heat map, your top impacts and your findings for free. This is the full legitimate interests assessment behind them, written up as the record a supervisory authority, an auditor or a customer’s due diligence team expects to see when you rely on Article 6(1)(f).
- The screening, recorded. Whether legitimate interests is available and the factors that call for extra care, each answered, with the verdict and your screening note: the record that shows you considered the other lawful bases.
- The purpose test. The purpose, the interest and whose it is, the benefit, and why the interest is lawful, clear and real.
- The necessity and balancing tests. Ten questions on necessity, reasonable expectations, transparency, the right to object, children, safeguards and any imbalance of power, each answered yes, partly or no, with your explanation.
- Every impact on the people concerned, highest level first. With its owner, the harm to people, the safeguards already in place, its likelihood, severity and level, and the rationale for the rating.
- The safeguards by due date. For each impact: the decision, the planned actions, the data protection safeguards and GDPR articles they rely on, the owner, the due date and the level before and after.
- The residual impact check. Whether High or Critical impact remains once the safeguards are in place, and so whether the balance can favour the processing.
- Conclusion and sign-off. The data protection advice and whether it was followed, the views of the people concerned, the conclusion, who approved it and when, and the next review date.
- Every finding, with what closes it. Each gap between your assessment and what Article 6(1)(f), Article 21 and the accountability principle expect, and the document that closes it.
- An AI-assisted analysis and 30/60/90-day roadmap. A one-sentence verdict, where you stand and what it means, a statement for senior management, three to five priorities and a roadmap, written from your own answers and checked automatically against them.
The live Excel workbook
The balance can shift as your purpose, data and customers change, so you also get the LIA as a working file, not a static export:
- Dashboard: the process score, level and heat maps, recalculated as you edit.
- Criteria: your scales, band ceilings and appetite line, which drive every calculation.
- Scope and Risk register: change a likelihood or impact and the level, band and appetite check update.
- Treatment plan: decisions, safeguards, owners, due dates, targets and acceptance.
- LIA record: the screening, the purpose test, the necessity and balancing answers and the conclusion as a working record you can keep editing, alongside the register.
How to get it
- Run the free legitimate interests assessment template: screen the basis, set out the purpose, test necessity and balance, rate the impact on people, choose the safeguards and record your conclusion.
- Choose Get the full report. The report and workbook are in your account straight away, and they rebuild from your latest answers whenever you download them.
Built for controllers that rely on legitimate interests under the EU GDPR or the UK GDPR, for marketing, analytics, fraud prevention, security, employee monitoring or intra-group sharing. One assessment covers one processing activity.
One payment covers this assessment. Edit it as often as you like and download the updated report at no extra cost. This is a self-assessment built from the information you enter; it is not a certification, an audit opinion or legal advice.








Reviews
There are no reviews yet