LGPD Art.10: Art. 10: Relying on legitimate interest

Legitimate interest may ground processing only for legitimate purposes judged on concrete situations, including support and promotion of the controller's activities and the protection, for the data subject, of the regular exercise of their rights or services that benefit them, respecting their legitimate expectations and fundamental rights. Only data strictly necessary for the purpose may be processed; the controller must take measures to ensure transparency of processing based on legitimate interest; and the ANPD may request a data protection impact report where processing rests on legitimate interest.