Right to Object
What is Right to Object?
The right of data subjects under GDPR Article 21 to object to processing of their personal data based on legitimate interests or public interest grounds. When exercised for direct marketing purposes, the controller must stop processing immediately.
Terms that appear alongside right to object
Each of these is named in at least one of the same controls as right to object. The number is how many controls name both.
- data subject 37 shared controls
- data subject rights 33 shared controls
- automated decision making 28 shared controls
- consent 24 shared controls
- gdpr 23 shared controls
- data portability 21 shared controls
- profiling 19 shared controls
- right to be forgotten 14 shared controls
Frameworks that govern right to object
What the standards actually require on right to object
Requirements naming right to object across 6 standards, quoted from the control text.
A data subject proving identity may object on legitimate grounds to processing of his or her data, and may object free of charge to use of the data for prospecting, in particular commercial, by the current controller or a later one.
law-no-09-08-on-the-protection-of-individuals-with-regard-to-the-processing-of-personal-data::9 · Article 9: right to object, and free objection to prospecting →Every natural person may object, for legitimate reasons, before the controller to the collection and processing of their personal data, including for commercial promotion;
lebanon-electronic-transactions-and-personal-data-protection-law-law-no-81-2018::92 · Article 92: the right to object, including to commercial promotion →A data subject may object to the processing of their personal data, and the controller discontinues the processing unless it demonstrates a public interest or other legitimate grounds that override the fundamental rights, freedoms and interests of the data sub...
nigeria-data-protection-act-2023-ndpa::36 · Right to object →The data subject may object at any time on grounds relating to their particular situation, including to profiling; processing must stop within ten working days of the objection unless the controller shows compelling legitimate grounds overriding the data subje...
paraguay-law-no-7593-2025-on-personal-data-protection::30 · Article 30 Right to object →The data subject has the right to object to the processing of their personal data, including processing for direct marketing, automated processing or profiling, and must be notified and given an opportunity to withhold consent in case of changes or amendments...
philippines-data-privacy-act::R.34 · IRR section 34(b): right to object →Article 68 with Decree Articles 58 to 60: any person may object on legitimate grounds to processing of their data, except where processing meets a legal obligation; on written collection the form asks whether the person wishes to object;
senegal-law-on-personal-data-protection-law-no-2008-12::68 · Offer the right to object on legitimate grounds, asked for at collection →Questions people ask about right to object
What is Right to Object?
Why is Right to Object important for compliance?
Which compliance frameworks address Right to Object?
Where can I learn more about Right to Object?
See how Right to Object applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.