• RMIGO home
• Records Management
• Freedom of Information
• Data Protection
  • What is personal data?
  • Principles
  • Privacy by design
  • Data Privacy Impact Assessments
  • Your information
  • Individuals' rights
    • Right of access
    • Right to rectification
    • Right to erasure
    • Right to restriction of processing
    • Right to data portability
    • Right to object
    • Rights related to automated decision making
  • Data security
  • Data breaches
  • Guidance
  • Training
  • Glossary
• ePrivacy
• Copyright
• University Archive
• Contact us

Right to object 

Under the GDPR, individuals have the right to object to:

1. processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including authority);
2. direct marketing (including profiling); and
3. processing for purposes of scientific/historical research and statistics.

Once requested, processing must stop unless:

• the university can demonstrate there are compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the individual; or
• the processing is for the establishment, exercise or defence of a legal claim.

Individuals must have “grounds relating to his or her particular situation” in order to exercise their right to object to processing for research purposes.

If you are conducting research where the processing of personal data is necessary for the performance of a public interest task, you are not required to comply with an objection to the processing.

If you would like to exercise your right to object, please notify dataprotection@york.ac.uk