can support necessary processing of non-sensitive personal data only when the controller's or a third party's lawful, concrete interest does not give way to the person's rights and freedoms.
The ANPD recommends a three-phase balancing test: purpose, necessity, and balancing with safeguards. Its model is not mandatory, but the LGPD conditions are.
Use Article 7(IX) only for non-sensitive personal data and a specific purpose. Identify a grounded in a concrete situation, show that the processing is necessary and no less intrusive reasonable route achieves the purpose, then weigh impacts, rights, vulnerabilities, and the person's . Add safeguards and stop if rights and freedoms prevail.
Phase 1, purpose: describe whether the interest belongs to the controller or a third party, the concrete situation supporting it, the benefit sought, and its compatibility with Brazilian law. Confirm that the data is not sensitive. If children or adolescents are involved, document how their best interest is observed and prevails.
Phase 2, necessity: identify the minimum data and operations needed for the purpose. Compare less intrusive reasonable alternatives, narrower populations, shorter retention, lower precision, or processing that avoids identification.
Phase 3, balancing and safeguards: assess the relationship with the person, collection source and context, purpose compatibility, likely expectations, scale, intrusiveness, vulnerability, possible harms, discrimination, and ability to exercise rights. Add safeguards, then decide whether rights and freedoms still prevail.
Sources (2)
Planalto LGPD text for Article 7 lawful bases and Article 10 legitimate-interest safeguards.
legítimo interesse do controlador ou de terceiro
ANPD guidance on interpreting legitimate interest and documenting the balancing test.
i) finalidade; ii) necessidade; e iii) balanceamento e salvaguardas
The controller owns the Article 7(IX) decision. The business or product owner supplies the concrete interest and alternatives; data and engineering identify fields, sources, scale, recipients, and retention; privacy or legal challenges the balance; security and product teams implement safeguards.
Keep one test per specific purpose. Record the interest and beneficiary, data category, people, collection context, purpose, necessity and alternatives, expectations, impacts, vulnerabilities, safeguards, transparency, objection path, retention, recipients, approver, conclusion, and reassessment triggers.
Sources (1)
ANPD guidance on interpreting legitimate interest and documenting the balancing test.
i) finalidade; ii) necessidade; e iii) balanceamento e salvaguardas
Article 7 is unavailable for sensitive data. Article 11's fraud-prevention and data-subject-security basis is separate and limited to electronic identification and authentication; the ANPD guide applies a similar balancing method to that basis.
Publicly accessible data remains protected. Purpose, good faith, public interest, rights, source, context, and still matter. A privacy notice does not make disproportionate employee surveillance, unexpected profiling, or broad reuse acceptable.
ANPD examples show why context controls the result. A school may be able to use ordinary student identifiers to authenticate access to its Wi-Fi after a best-interest assessment and suitable safeguards. Child-directed advertising for unhealthy food in an educational app failed the guide's analysis because the purpose was unexpected and did not satisfy the child's best interest. Shopping-centre camera monitoring may support safety, but scale, public-area monitoring, children, retention, access limits, notices, and avoidance of biometric analysis can require a fuller high-risk assessment and .
Sources (2)
Planalto LGPD text for Article 7 lawful bases and Article 10 legitimate-interest safeguards.
legítimo interesse do controlador ou de terceiro
ANPD guidance on interpreting legitimate interest and documenting the balancing test.
i) finalidade; ii) necessidade; e iii) balanceamento e salvaguardas
The ANPD model is optional, so an organisation may adapt the format. The record must still be detailed enough to demonstrate the actual purpose, interest, necessity, balance, expectations, and safeguards. A short assessment may be proportionate for clearly low-impact processing; high-scale or novel technology may need more detail and a broader .
Link the result to the Article 37 processing record, live notice, data minimisation, retention, security controls, objection route, vendor instructions, and any . Approval should be conditional on those safeguards operating.
Sources (2)
Planalto LGPD text for Article 7 lawful bases and Article 10 legitimate-interest safeguards.
legítimo interesse do controlador ou de terceiro
ANPD guidance on interpreting legitimate interest and documenting the balancing test.
i) finalidade; ii) necessidade; e iii) balanceamento e salvaguardas
Assign the purpose, necessity, balancing, safeguards, approval, and review evidence.
Turn Legal Bases and Legitimate Interest Balancing into scoped questions, evidence fields, and review tasks.
Use Research Copilot to answer follow-up questions with cited source material.
Review scope, evidence, owners, and the next compliance actions with operational practice.
"i) finalidade; ii) necessidade; e iii) balanceamento e salvaguardas"
"legítimo interesse do controlador ou de terceiro"
How ANPD investigates LGPD infringements, classifies severity, selects sanctions, calculates fines, and weighs aggravating and mitigating evidence.
Apply LGPD Articles 3 and 4 to a processing activity, including foreign organisations, Brazil collection, targeting, exclusions, and the evidence to retain.
Apply Brazil's LGPD incident notification test, three-business-day clock, notice content, phased filing, affected-person communication, and five-year records.
An evidence-based Brazil LGPD checklist for scope, roles, legal bases, notices, rights, vendors, security incidents, transfers, retention, and governance.
Build an LGPD compliance program from processing records, legal bases, transparency, rights, security, vendors, transfers, incidents, and accountable evidence.
Classify LGPD controller, operator, sub-operator, and encarregado roles from actual decisions, instructions, processing facts, and Resolution 18 duties.
Brazil LGPD rights guide covering confirmation, access, correction, restriction, deletion, portability, consent, sharing, objection, and automated decisions.
Track Brazil LGPD commencement dates, data-access responses, incident notices, international-transfer clauses, and ANPD fine-payment deadlines.
Build an LGPD data-subject response that identifies the right, applies the correct timing, records the decision, protects third parties, and proves delivery.
Run an LGPD data-subject request from intake and identity checks through rights analysis, response timing, evidence, exceptions, and escalation.
Decide whether an LGPD incident is reportable, calculate the ANPD deadline, prepare complete or staged notices, and keep the required five-year record.
Run an LGPD personal-data incident from confirmation and risk assessment through three-business-day notices, supplementation, mitigation, and records.
Compare LGPD international-transfer mechanisms: adequacy, ANPD standard clauses, approved specific clauses, global corporate rules, consent, and other Article 33 routes.
Brazil LGPD international-transfer guide for identifying transfers, selecting Article 33 mechanisms, applying ANPD clauses, EU adequacy, and transparency.
Compare LGPD Article 7 bases for ordinary personal data and Article 11 bases for sensitive data, with consent, necessity, evidence, and edge cases.
Understand every ANPD administrative sanction under LGPD Article 52, the fine ceilings, non-monetary penalties, and public-body limits.
Answers to common Brazil LGPD questions about scope, roles, legal bases, rights, incidents, transfers, impact reports, small agents, and enforcement.
Reference guide to Brazil LGPD scope, principles, legal bases, transparency, rights, roles, security, incidents, transfers, records, and ANPD oversight.
Build an LGPD RIPD evidence file that proves the processing scope, high-risk screen, necessity, safeguards, residual risk, approval, and later review.
Decide when to prepare an LGPD RIPD, apply the ANPD high-risk screen, document required evidence and mitigation, approve residual risk, and review changes.
Check whether an organization qualifies for Brazil's small-processing-agent regime, which flexibilities apply, and which LGPD duties remain unchanged.
Choose and maintain LGPD templates for processing records, data-subject requests, incidents, RIPDs, transfers, and controller-operator role evidence.
Classify an LGPD international transfer, confirm the processing legal basis and transfer mechanism, document onward transfers, and approve the evidence before launch.
Compare Brazil's LGPD and California's CCPA by scope, legal bases, consumer rights, sale and sharing rules, deadlines, transfers, and enforcement.
Compare Brazil's LGPD and the EU GDPR by scope, legal bases, roles, rights deadlines, impact assessments, incidents, transfers, and enforcement.
Apply LGPD Article 14 to children's and adolescents' data: age categories, best interests, legal bases, parental consent, limited collection, notices, and evidence.
Compare actual decision rights with contracts, operator instructions, sub-operator approvals, and the encarregado channel.
Test tracker classification, legal bases, banner choices, stored preferences, and deployed network behavior.
Assign the reportability decision, knowledge timestamp, ANPD filing, affected-person notice, and follow-up evidence.
Match each exporter, importer, onward flow, and processing basis to the selected Article 33 mechanism.
Record each purpose, data category, statutory basis, necessity, notice, retention, and reassessment trigger.
Document the interest, necessity, alternatives, expectations, impacts, effective safeguards, and approval.
Assign the report trigger, processing description, risk assessment, safeguards, controller decision, and mitigation checks.
Organize the infringement facts, classification, revenue inputs, mitigation evidence, and procedural deadlines.
Verify eligibility, group revenue, the two-part high-risk screen, each flexibility used, and continuing duties.