Right to object

Data protection glossary · 1 minute read

The right to object allows data subjects to object to processing of their data that is based on legitimate interests or on a task carried out in the public interest.

General objection

The data subject can object on grounds relating to their particular situation. The controller must then stop the processing unless it demonstrates compelling legitimate grounds that override, or the processing serves the establishment of legal claims.

Objection to direct marketing

There is an unrestricted right to object to processing for direct marketing purposes. No balancing takes place, and the data may no longer be processed for this purpose.

The right to object must be explicitly brought to the data subject's attention, at the latest at the time of the first communication, and presented separately from other information. Objection must be distinguished from the withdrawal of consent.

Art. 21(1) GDPR
Objection on grounds relating to the particular situation.
Art. 21(2) and (3) GDPR
Objection to direct marketing.
Art. 21(4) GDPR
Obligation to draw attention to the right to object.

Last updated: September 2026

Questions about this topic?

Dr. Georg Schröder, LL.M. · Managing Director, Lawyer, Data Protection Officer

Book a consultation

In 20 minutes you will know where you stand.

We clarify where action is needed on data protection, AI and information security - and what you should do next.