Artifact GuideBrazilLegitimate Interest Balancing

Brazil LGPD Legitimate Interest Balancing

Legitimate Interest Balancing under the Brazil LGPD is a practical check: a controller may rely on legitimate interest only for a real, specific purpose, using only the data strictly needed, with transparency and a record of the decision.

Use this page to understand what the rule means, when it can be used, and what evidence teams should keep before they launch or change a processing activity.

Back to main artifact Review sources

Author

Sorena AI

Published

May 9, 2026

Updated

May 9, 2026

Questions

Structured answer sets in this page tree.

Primary sources

Cited legal and guidance references.

Publication metadata

Sorena AI

Published May 9, 2026

Updated May 9, 2026

Overview

Under the Brazil LGPD, legitimate-interest balancing means checking whether a controller can use legitimate interest as the legal basis for a specific processing activity. The law says the purpose must be legitimate and concrete, the processing must be limited to the minimum data needed, and the controller must ensure transparency and keep a record of the decision.

Search this module

Find a question or answer quickly

3 of 3 questions

Question 1

What should teams do about Legitimate Interest Balancing under the Brazil LGPD?

Teams should treat Legitimate Interest Balancing under the Brazil LGPD as a source-linked operating decision: confirm whether the issue affects controller/operator roles, lawful basis, data-subject rights, children data, international transfers, security incidents, DPO/encarregado duties, or ANPD enforcement exposure, assign the team that can change the process, and keep evidence showing the action and review trigger.

In plain language, the rule lets a controller rely on legitimate interest only when the purpose is real and specific, the processing stays within what is strictly necessary, and the controller can explain the balance and show why the activity is allowed.

Write the Legitimate Interest Balancing decision in one sentence before drafting controls.
Attach the external source URL and a short source quote to the evidence record.
Route unclear cases to legal, privacy, security, or compliance review before launch.

Citations

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10

Article 10 is the official LGPD basis for legitimate-interest balancing, including necessity, transparency, and ANPD impact-report requests.

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10 §1º

Necessity language supports limiting legitimate-interest processing to the minimum personal data needed for the stated purpose.

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10 §2º

Transparency language supports documenting notices and review evidence for legitimate-interest balancing.

Question 2

What evidence should teams keep for Legitimate Interest Balancing under the Brazil LGPD?

Useful evidence is not just a privacy notice. Keep the source, role map, lawful-basis note, rights log, transfer analysis, incident assessment, DPO review, and approval trail together.

Source URL and quote used for the decision.
Scope notes, screenshots, data-flow or system references, and role mapping.
Implementation ticket, approval record, exception notes, and review date.

Citations

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10 §1º

Necessity language supports limiting legitimate-interest processing to the minimum personal data needed for the stated purpose.

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10 §2º

Transparency language supports documenting notices and review evidence for legitimate-interest balancing.

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10 §3º

ANPD impact-report language supports retaining a balancing record and escalation path for legitimate-interest processing.

Question 3

Which mistakes create risk when handling Legitimate Interest Balancing under the Brazil LGPD?

The common failure pattern is using a GDPR-style answer without checking LGPD roles, lawful bases, ANPD guidance, transfer rules, incident thresholds, and Brazilian enforcement context.

Using an old threshold, deadline, source page, or contract template without checking current source text.
Treating a source-linked exception as a general exemption for every product or data flow.
Publishing notices, controls, or answers that do not match the actual product behavior.

Citations

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10

Article 10 is the official LGPD basis for legitimate-interest balancing, including necessity, transparency, and ANPD impact-report requests.

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10 §1º

Necessity language supports limiting legitimate-interest processing to the minimum personal data needed for the stated purpose.

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10 §2º

Transparency language supports documenting notices and review evidence for legitimate-interest balancing.

LEI Nº 13.709, DE 14 DE AGOSTO DE 2018 - Art. 10 §3º

ANPD impact-report language supports retaining a balancing record and escalation path for legitimate-interest processing.

Recommended next step