LIA Generator
Work through the ICO/EDPB three-part legitimate interests test — purpose, necessity and balancing — with prompts for AI and profiling, and export a dated LIA record. Entirely in your browser.
Assessing an AI system? Also use the FRIA generator.
Completeness: 0%
Purpose Test — Identify the Legitimate Interest
Identify the legitimate interest you are pursuing. It must be real, specific and lawful — not speculative. For AI, name the interest the processing actually serves (e.g. fraud prevention, security), not "improving the model" in the abstract.
What personal data is processed, and how (including any AI/profiling).
State the specific interest. EDPB Opinion 28/2024: it must be present, real and clearly articulated.
Necessity Test — Is the Processing Necessary
Show the processing is necessary and proportionate to achieve the interest, and that there is no less intrusive way. Necessity is a high bar — convenient is not the same as necessary.
List alternatives and why they are insufficient (data minimisation under Article 5(1)(c)).
Balancing Test — Interests vs Rights of Individuals
Balance your interest against the interests, rights and freedoms of the individuals. Where automated decisions or profiling are involved, weigh the heightened impact and check the Article 22 safeguards. Document the reasonable expectations of the individuals.
Flag any special-category data (Art 9), criminal-offence data (Art 10) or data of vulnerable people.
State whether the processing produces legal or similarly significant effects, and the Art 22(3) safeguards.
Article 21: individuals can object to processing based on legitimate interests.
Record your decision and any conditions. This LIA should be dated, signed off and reviewed periodically.
Assessment outcome
Record your decision on whether legitimate interests is an appropriate lawful basis.
Export your dated LIA record. Everything stays in your browser — nothing is uploaded.
The Three-Part Test
Purpose, necessity and balancing — structured exactly the way the ICO and EDPB expect a legitimate interests assessment to be documented.
Built for AI Processing
Dedicated prompts for profiling, automated decisions under Article 22 and the safeguards EDPB Opinion 28/2024 expects when AI relies on legitimate interests.
Private by Design
Everything stays in your browser. Nothing you type is uploaded, and your dated LIA exports straight to Markdown or JSON.
Disclaimer: This tool helps you draft a legitimate interests assessment based on GDPR Article 6(1)(f). It does not constitute legal advice. Confirm your lawful basis with a qualified data protection adviser.