EUGDPRData Subject RightsEASYFree question
Under what circumstances can a data subject exercise the right to object?
- A.Only after a data breach, under Article 16's right to rectification, which allows the data subject to require the controller to delete records instead of correcting them
- B.Only when data is inaccurate, under Article 9(2)(a) explicit consent, which may be inferred from silence for special category data
- C.Only for special category data
- D.When processing is based on legitimate interests or public task
Why D is correct
Article 21 allows data subjects to object to processing based on legitimate interests (Article 6(1)(f)) or public task (Article 6(1)(e)), including profiling based on those provisions.
Know someone studying for GDPR? Send them this one.