Skip to content

Legitimate Interest Assessments

When relying on legitimate interests as a legal basis for processing personal data, you are taking on additional responsibility for protecting people's rights and interests. Learn how to conduct a legitimate interest assessment (LIA) to ensure our Company's interests don't conflict with those of individuals.

Start your trial Course details
  • 10 Minutes
  • For all staff

Learning objectives

  • Be aware of the six legal bases for data processing under the UK General Data Protection Regulation (GDPR)
  • Understand what legitimate interests are and why you need to carry out LIAs
  • Thoroughly perform all stages of an LIA
  • Appropriately document and review all findings from an LIA
  • Know when it is appropriate to conduct a data protection impact assessment (DPIA)

Start your compliance e-learning journey with a free trial

Our no-obligation free trial gives you access to our libraries and compliance platform. 

Ready to start your free trial? Complete the form, and a member of the Skillcast team will be in touch with further details.

Related courses

Boost your compliance efforts with our range of courses. Varying in length and topic, our courses equip you with the tools to create an ethical and resilient workplace.

PCI Data Security Standard Compliance Training Course

PCI Data Security Standard (PCI-DSS) is the information security standard for organisations that process credit card payments.

Read more

In-depth 60 Minutes Data Protection (GDPR) For all staff

Data Protection Compliance Training Course

Data protection relates to how all organisations collect, use, and store personal and sensitive data.

Read more

In-depth 45 Minutes Data Protection (GDPR) For all staff

General Data Protection Regulation (GDPR)

Data protection relates to how all organisations collect, use, and store personal and sensitive data.

Read more

In-depth 30 Minutes Data Protection (GDPR) For all staff

Data Protection

Data protection relates to how personal and sensitive data is collected, used and stored by all organisations.

Read more

Refresher 15 Minutes Data Protection (GDPR) For all staff

Privacy and Electronic Communications Regulations (PECR)

PECR are new regulations that, along with the GDPR and Data Protection Act 2018 (in the UK), give consumers specific rights in respect of electronic communications.

Read more

Express 15 Minutes Data Protection (GDPR) For all staff

Understanding the GDPR

The General Data Protection Regulation (GDPR) sets out key principles for handling personal data and protecting individuals' rights.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

Personal Data Breaches

Personal data breaches can occur through hacking, human error or unauthorised access, leading to serious legal and reputational consequences.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

Data Protection Impact Assessments

Data Protection Impact Assessments (DPIAs) are used to evaluate our data processing activities and mitigate risks to individuals.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

Controllers and Processors

The differences between data controllers and data processors are crucial to understanding data protection obligations.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

Special Category Data

In many workplaces, sensitive data, including special category data, is collected and requires extra care.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

GDPR Principle 1

The first principle of the GDPR requires that personal data must be processed lawfully, fairly and transparently.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

GDPR Principle 2

The second principle of the GDPR, purpose limitation, requires that personal data be collected for specified, explicit and legitimate purposes.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

GDPR Principle 3

The third principle of the GDPR, data minimisation, requires that personal data collected must be adequate, relevant and limited to what is necessary.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

GDPR Principle 4

The fourth principle of the GDPR, accuracy, requires that personal data must be correct, up to date and not misleading.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

GDPR Principle 5

The fifth principle of the GDPR, storage limitation, requires that personal data be retained only for as long as necessary for its intended purpose.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

GDPR Principle 6

The sixth principle of the GDPR, integrity and confidentiality, requires that personal data be protected against unauthorised access, loss or damage.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

GDPR Principle 7

The seventh principle of the GDPR, accountability, requires organisations to take responsibility for compliance and demonstrate good governance in data protection.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

GDPR and Consent

Consent is one of the six lawful bases for processing personal data under the GDPR, requiring individuals to give clear, informed and voluntary agreement.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

GDPR Lawful Bases for Processing

The General Data Protection Regulation (GDPR) requires organisations to have a lawful basis for processing personal data, chosen from six legal grounds.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

GDPR Legitimate Interests

Legitimate interests is a flexible lawful basis for processing personal data, but it requires balancing business needs with individuals' rights.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

GDPR International Transfers

The international transfer of personal data is restricted to ensure individuals' privacy rights are protected when data is sent abroad.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

GDPR Individual Rights

The General Data Protection Regulation (GDPR) grants individuals eight specific rights over their personal data, ensuring transparency and control.

Microlearning 5 Minutes Data Protection (GDPR) For all staff

GDPR Subject Access Requests

Individuals have the right to access their personal data and organisations must respond to subject access requests (SARs) within legal timeframes.

Microlearning 5 Minutes Data Protection (GDPR) For all staff