Legitimate interest doesn’t last forever. However, the GDPR doesn’t indicate a specific time frame as it can depend on context and the original scope. Each data controller may use a different timescale that should be supported by justifying documentation.