Legitimate interest as a legal basis: Guidance from the EDPB
Controllers must ensure necessary, proportionate, processing which respects the rights of data subjects, ensuring GDPR compliance. When processing personal data under the General Data Protection Regulation (GDPR), controllers must ensure that their actions are lawful. Specifically, if relying on Article 6(1)(f) of the GDPR, the processing must be based on a legitimate interest. This
