The EDPB has adopted new guidelines on "legitimate interest. This is one of the bases in the AVG for processing personal data. The AVG offers 6 possible bases, of which legitimate interest is thus one.

These guidelines analyze the criteria of Article 6(1)(f) AVG that controllers must meet in order to lawfully process personal data that are "necessary for the purposes of the legitimate interests pursued by the controller or by a third party."
Source: European Data Protection Board
