EUGDPRData Subject RightsEASYFree question
When a data subject objects to processing for direct marketing purposes:
- A.Processing for direct marketing must stop immediately and unconditionally
- B.The controller can charge a fee to stop processing, per Article 21(2), which allows objection to direct marketing only if the data subject pays an opt-out fee
- C.The controller can continue processing for 30 days
- D.An opt-out period of 90 days applies, and the Act requires a paper ledger
Why A is correct
Article 21(3) states that when the data subject objects to processing for direct marketing, the personal data shall no longer be processed for such purposes. This right is absolute.
Know someone studying for GDPR? Send them this one.