Restrict, object, and automated decision-making

Right to restrict processing

Individuals can ask you to limit how you use their data, for example while a disagreement about its accuracy is resolved, without requiring full deletion.

Right to object

Individuals can object to processing based on legitimate interests, public task, or for direct marketing. An objection to direct marketing must always be honoured, no balancing test required.

Rights related to automated decision-making and profiling

Individuals have the right not to be subject to a decision based solely on automated processing, including profiling, if it has legal or similarly significant effects on them, unless specific exceptions apply, and even then they have a right to human review.

Right to data portability

Individuals can obtain and reuse their data across services, in a structured, commonly used, machine-readable format, where processing is based on consent or contract and carried out by automated means.