Legitimate interest is a legal basis for data processing (Article 6, GDPR). An interest can be considered as legitimate as long as the controller can pursue it in a way that is in accordance with data protection and other laws. In other words, a legitimate interest must be acceptable under the law. The notion of legitimate interest could include a broad range of interests – whether trivial or compelling, straightforward or controversial. Therewill then be a second step: balancing these interests against the interests and fundamental rights of the data subjects. This a more restricted approach and more substantive analysis should be taken.