When submitting a data protection request (typically through a request form linked from a company’s privacy policy), there are two options that seem related to making sure your data isn’t sold or shared, but these forms don’t do a very good job of explaining the difference. The two options are:
1. Data Processing Objection Request
2. Data Processing Restriction Request
I feel like this is intentionally made to be confusing.
In: Other
1. The UK GDPR gives individuals the right to object to the processing of their personal data in certain circumstances.
Individuals have an absolute right to stop their data being used for direct marketing.
In other cases where the right to object applies you (the company) may be able to continue processing if you can show that you have a compelling reason for doing so.
2. Individuals have the right to request the restriction or suppression of their personal data.
This is not an absolute right and only applies in certain circumstances.
When processing is restricted, you (the company) are permitted to store the personal data, but not use it.
Source [The ICO](https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/)
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-restrict-processing/
Latest Answers