The LGPD establishes limits on the processing of personal data, and companies should be aware of the conditions for handling this data based on the concept of legitimate interest. The subject is new in Brazil and the National Data Protection Authority (ANPD) has not yet expressed itself on the subject. In this article, we address the hypotheses in which companies can use the concept to handle their clients' personal data.