Chapter 1
The right to object
[page 17]If an employer relies on the fifth or sixth of the lawful bases for processing the data (public interest task or legitimate interests), then the individual has the right to object to their data being processed (Article 21 UK GDPR). The employer cannot then process their data unless there are “compelling legitimate grounds” for processing it that override the individual’s rights and freedoms, or for the purposes of a legal claim.