Practical guidance on conducting GDPR legitimate interest assessments (LIAs) under UK and EU data protection law — purpose, necessity, and balancing tests, documentation, and common controller pitfalls.