Right to object
Art. 21
-
Last updated
Mandatory
Catalog reference
Let a person object to processing based on legitimate interests or public task at any time on grounds relating to their situation, and stop unless you demonstrate compelling overriding grounds. Direct-marketing objections must always be honoured immediately, with no override.
Narrative — how we satisfy this requirement
An objection is recorded as a ticket and assessed by the Data Protection Officer, and the processing for security logging has its documented balancing test.
Code
Title
Status
No risks are linked to this requirement. Link from a risk's Edit page.