Objection and restriction.
WHAT OBJECTION MEANS
Asking you to stop processing based on legitimate interests or public task.
WHAT YOU MUST DO
Stop, unless you demonstrate compelling grounds that override their interests.
WHAT COMPELLING MEANS
More than convenience or commercial preference.
WHAT TO DO IN PRACTICE
Assess, and record the reasoning.
WHAT IS ABSOLUTE
Objection to direct marketing.
WHAT THAT MEANS
You stop, with no assessment.
WHAT RESTRICTION MEANS
Storing the data but not otherwise using it.
WHEN IT APPLIES
While accuracy is disputed While an objection is assessed Where processing is unlawful but they want it retained Where you no longer need it but they need it for claims
WHAT TO DO WHILE RESTRICTED
Store it, and do nothing else without their consent.
WHAT THAT REQUIRES TECHNICALLY
A way to mark a record as restricted, respected everywhere.
WHY THAT IS FREQUENTLY MISSING
Systems have no such concept.
WHAT TO BUILD
A flag, checked by every process.
WHAT TO TELL THEM
When restriction is lifted, before resuming.
WHAT TO RECORD
The request, the assessment, and the outcome.
WHAT TO REVIEW
Whether restricted records are actually being left alone.
