LGPD innovated by bringing legitimate interest to the Brazilian legal system as a legal basis for the processing of personal data.

Unlike what happens with consent, there is no legal provision for revoking the legitimate interest by the holder. However, the controller assumes greater responsibility when using it, and he shall first analyze the applicability of this hypothesis through the Legitimate Interests Assessment (LIA).

To ensure that there is no abuse in the use of this legal basis, ANPD may request the controller to report the impact on the protection of personal data when the processing is based on legitimate interest.