Objection changes the decision process
An objection does not automatically stop processing. It obliges you to reconsider and justify.
Where the basis is legitimate interests, you have to demonstrate compelling grounds that override the individual's, which is a real test rather than a formality. For direct marketing there is no balancing at all and it must stop. Treating every objection as either automatic compliance or automatic refusal misses that the answer depends on why you were processing.
More on UK GDPR
- Lawful basis is the reason processing is permittedIt will not turn without the reason
- Consent is one lawful basis, not the default answerOne setting out of six
- Access rights concern personal data, not every documentThe lines about you, not the page
- Erasure is not an absolute delete buttonIt will not travel the whole way
- Data portability is narrower than a database exportOnly what fits the frame
- Rectification requires organisations to be able to correct inaccurate personal data wherever it is maintainedCorrect it once, then chase every copy
