Legitimate interest is a legal basis for using personal data without obtaining consent. A legitimate interest is based on an overriding benefit to a particular company or society as a whole, and intended to give controllers flexibility for situations where there is no undue impact on data subjects.
Under GDPR, companies must balance legitimate interests with the interests or fundamental rights and freedoms of the data subject, and show that its interest is favored in such a balancing test.