Privacy & Data Protection

Legitimate Interests Assessment Template

A legitimate interests assessment template defining the three-part legitimate interests assessment recording purpose, necessity and the balancing test, aligned to GDPR, ISO 27001.

14-20 pages|Updated 2026-09-12|2 frameworks
Aligned to:
GDPR
ISO 27001

What's Included

1. Purpose & Scope

When an LIA is required.

PurposeWhen to CompleteApproval

2. Purpose Test

Identifying the interest.

The Interest PursuedWho BenefitsWhy It MattersLawfulness

3. Necessity Test

Whether processing is actually needed.

Necessity ArgumentLess Intrusive AlternativesProportionality

4. Balancing Test

Weighing the individual's rights.

Reasonable ExpectationsNature of the DataImpact on IndividualsVulnerable GroupsSafeguards Applied

5. Outcome

The recorded decision.

DecisionConditions and SafeguardsObjection HandlingTransparency Requirements

6. Review

Cadence and triggers.

Change TriggersReview Date

Frequently Asked Questions

What should a legitimate interests assessment template include?

A comprehensive legitimate interests assessment template should include purpose & scope, purpose test, necessity test, balancing test, and more. This template covers 6 key sections aligned to GDPR, ISO 27001 requirements.

Which frameworks require a privacy & data protection policy?

Major frameworks requiring privacy & data protection policies include GDPR, ISO 27001. This template maps directly to their control requirements, making it easier to demonstrate compliance across multiple standards.

How often should a legitimate interests assessment template be reviewed?

Best practice is to review your legitimate interests assessment template at least annually, or whenever significant changes occur in your organisation, technology environment, or regulatory landscape. Most frameworks including ISO 27001 and NIST CSF require documented policy review cycles.

Build Your Compliance Programme

Pair this policy template with our compliance platform to map controls across 686+ frameworks, run self-assessments, and get AI-powered compliance advisory.

Get Started Free →

Free forever — no credit card required