Moving on to the final right provided by the GDPR is the right to object. The words ‘Right to Object’ are in itself self-explanatory and indicate that this right enables the data subject to oppose the processing of his or her personal data by the data controller.
So let us understand when the data subject can object to the processing:
1.When the processing is being done to achieve a public objective or while exercising an official authority
2. When the processing is being done to carry out the legitimate interests of the controller
The above shall also include profiling by the data controller i.e. the data subject can also object to the profiling being done by the data controller in the first two cases. However, the data controller shall not discontinue processing the data if it is able to demonstrate that the processing does not adversely affect the fundamental rights and freedoms of the data subject or any legal claims.
3. When the data is being processed for direct marketing purposes and in such a case, the data controller has to comply with the request. There are no exceptions to this point.
4. When data is being processed for scientific, historical research or statistical purposes. However, in this scenario the data controller can cite processing for public interest in order to not comply with the request of the data subject.
It is imperative that the data controller makes the data subject aware of his/her right to object in the first two scenarios. This right shall be exercised by automated means.