Generate a documented GDPR Legitimate Interests Assessment under Art. 6(1)(f). The 3-step balancing test — purpose, necessity, and balancing — ready for your privacy documentation.
If you rely on Legitimate Interests (Art. 6(1)(f)) as your lawful basis for any processing activity, you must be able to demonstrate a balancing test was conducted. The ICO, CNIL, and other DPAs expect to see a documented LIA when investigating complaints. One LIA per distinct processing activity.