Strumento gratuito

Generatore di LIA

Svolgi il test in tre fasi della valutazione del legittimo interesse (ICO/EDPB) — finalità, necessità e bilanciamento — con domande dedicate a IA e profilazione, ed esporta un registro LIA datato. Interamente nel tuo browser.

Stai valutando un sistema di IA? Usa anche il generatore di FRIA.

Completeness: 0%

Organisation (controller)

Assessor (name / role)

Part 1

Article 6(1)(f) — purpose test

Purpose Test — Identify the Legitimate Interest

Identify the legitimate interest you are pursuing. It must be real, specific and lawful — not speculative. For AI, name the interest the processing actually serves (e.g. fraud prevention, security), not "improving the model" in the abstract.

Controller / organisation

Processing activity

What personal data is processed, and how (including any AI/profiling).

The legitimate interest pursued

State the specific interest. EDPB Opinion 28/2024: it must be present, real and clearly articulated.

Who benefits from the processing

Any third-party or societal interest relied on

Part 2

Article 6(1)(f) — necessity test

Necessity Test — Is the Processing Necessary

Show the processing is necessary and proportionate to achieve the interest, and that there is no less intrusive way. Necessity is a high bar — convenient is not the same as necessary.

Why the processing is necessary for the interest

Less intrusive alternatives considered

List alternatives and why they are insufficient (data minimisation under Article 5(1)(c)).

Data minimisation and proportionality

Part 3

Article 6(1)(f) — balancing test

Balancing Test — Interests vs Rights of Individuals

Balance your interest against the interests, rights and freedoms of the individuals. Where automated decisions or profiling are involved, weigh the heightened impact and check the Article 22 safeguards. Document the reasonable expectations of the individuals.

Nature and sensitivity of the data

Flag any special-category data (Art 9), criminal-offence data (Art 10) or data of vulnerable people.

Reasonable expectations of the individuals

Likely impact on individuals

Automated decision-making / profiling (Article 22)

State whether the processing produces legal or similarly significant effects, and the Art 22(3) safeguards.

Safeguards and mitigations applied

Right to object and opt-out handling

Article 21: individuals can object to processing based on legitimate interests.

Outcome and conclusion

Record your decision and any conditions. This LIA should be dated, signed off and reviewed periodically.

Assessment outcome

Record your decision on whether legitimate interests is an appropriate lawful basis.

Export your dated LIA record. Everything stays in your browser — nothing is uploaded.

Il test in tre fasi

Finalità, necessità e bilanciamento — strutturato esattamente come l'ICO e l'EDPB si aspettano che venga documentata una valutazione del legittimo interesse.

Pensato per i trattamenti di IA

Domande dedicate alla profilazione, alle decisioni automatizzate (articolo 22) e alle garanzie attese dal Parere 28/2024 dell'EDPB quando l'IA si basa sul legittimo interesse.

Privato by design

Tutto resta nel tuo browser. Nulla di ciò che digiti viene caricato e il tuo LIA datato si esporta direttamente in Markdown o JSON.

Avvertenza: Questo strumento ti aiuta a redigere una valutazione del legittimo interesse basata sull'articolo 6(1)(f) del GDPR. Non costituisce consulenza legale. Conferma la tua base giuridica con un consulente qualificato in materia di protezione dei dati.