right-to-object

name	right-to-object
title	Handling Right to Object to Processing
description	Handles GDPR Article 21 right to object to processing, including compelling legitimate grounds assessment, ceasing processing obligations, documentation requirements, and the relationship with erasure under Article 17(1)(c). Activate for right to object, Art. 21, objection to processing, legitimate interest queries.
author	mukul975
author_url	https://github.com/mukul975/Privacy-Data-Protection-Skills/tree/main/skills/privacy/right-to-object
license	Apache-2.0
version	0.1.0
execution_mode	open
jurisdiction	general
practice	data-protection
language	en

Handling Right to Object to Processing

Overview

The right to object under GDPR Article 21(1) allows data subjects to object to processing based on legitimate interests (Art. 6(1)(f)) or public interest/official authority (Art. 6(1)(e)), including profiling based on those provisions. Upon objection, the controller must cease processing unless it demonstrates compelling legitimate grounds that override the interests, rights, and freedoms of the data subject, or processing is necessary for legal claims.

Legal Foundation

GDPR Article 21 — Right to Object

1. Art. 21(1) — The data subject has the right to object, on grounds relating to their particular situation, to processing based on Art. 6(1)(e) (public interest) or Art. 6(1)(f) (legitimate interests), including profiling based on those provisions. The controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defence of legal claims.

2. Art. 21(2)-(3) — [Covered separately in managing-direct-marketing-objection skill]

3. Art. 21(4) — At the latest at the time of the first communication with the data subject, the right to object shall be explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information.

4. Art. 21(5) — In the context of the use of information society services, the data subject may exercise their right to object by automated means using technical specifications.

5. Art. 21(6) — Where personal data are processed for scientific or historical research purposes or statistical purposes under Art. 89(1), the data subject has the right to object unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Relationship with Art. 17(1)(c) — Erasure Following Objection

Where the data subject successfully objects and there are no overriding legitimate grounds, the data subject also has the right to erasure under Art. 17(1)(c).

Objection Processing Workflow

Step 1: Receive and Log the Objection

1. Log with reference OBJ-YYYY-NNNN.
2. Record the specific processing activities objected to.
3. Record the data subject's particular situation and grounds.
4. Acknowledge receipt within 3 business days.
5. Verify identity.
6. Immediately cease the objected-to processing pending the compelling grounds assessment (apply restriction under Art. 18(1)(d)).