Sometimes perceived as the more ambiguous lawful basis, legitimate interest has been the subject of new draft guidelines published by the European Data Protection Board ("EDPB"). This article will delve into those draft guidelines - that are currently subject to public consultation until 20 November 2024 - to understand their potential impact for organisations.