The Right to Object: When Can a Company Say No?
Article 21 of the UK GDPR gives people the right to object to certain types of data processing. Learn how your company should handle objections.
Under Article 21, individuals can object to processing based on:
- Legitimate interests
- Direct marketing (this is an absolute right)
- Tasks carried out in the public interest
Once someone objects, you must stop processing unless you can demonstrate compelling legitimate grounds that override their interests.
💡 Tip:
Keep your marketing opt-out system tight. If someone opts out and keeps receiving emails, that’s a fast track to a complaint.
