The balancing test involves you considering the interests and fundamental rights and freedoms of the data subject and balancing them against your own interests. In other words, you need to determine whether data subjects’ rights override the legitimate interests you have identified. This will involve considering: the nature of the personal data to be processed the expectations of the data subjects the likely risks of the processing for the data subject and if any measures can be implemented to reduce such risks If your processing carries a potential for high risk (if the potential risk is severe or the likelihood of the risk occurring is probable), you need a compelling legitimate interest to be able to satisfy the balancing test. You will also need to carry out a Data protection impact assessment (DPIA). For more information, read Legitimate interest assessments and Data protection impact assessments.