Template Letter to Raise an Objection to Processing

Summary

This is a template letter published by the Jersey Office of the Information Commissioner (JOIC) to help individuals exercise their right to object to the processing of their personal data under Articles 35, 36 or 37 of the Data Protection (Jersey) Law 2018. It is guidance only and must be adapted to the individual's specific circumstances before use.

• Purpose: Provides a ready-made structure for an individual to formally object to an organisation's processing of their personal data for public interest tasks, legitimate interests, research/statistical purposes, or direct marketing.
• Content prompts: Asks the individual to state their identifying details, specify the legal basis for the objection, explain why processing should stop, and request written confirmation of compliance or reasons for refusal.
• Identity verification: Notes the organisation may require proof of identity before acting on the request.
• Response obligation: Reminds recipients that under the DPJL 2018 organisations must respond without undue delay and, in any event, within four weeks of receipt, or explain any delay.
• Support: Points recipients to JOIC guidance and contact details if they need help handling such a request.

For compliance officers, this template signals the format and content an objection request under the DPJL 2018 may take, and restates the statutory four-week response timeframe that organisations must observe when such a request is received.

Key obligations

• Organisations that receive an objection request under Art.35/36/37 of the DPJL 2018 must respond without undue delay and, in any event, within four weeks of receipt.
• If unable to comply within four weeks, the organisation must inform the individual of the anticipated timescale and reasons for the delay.
• The organisation must confirm in writing whether it has complied with the objection request.
• If the request is refused in whole or part, the organisation must explain its reasons for refusal.

Applies to

organisations processing personal data, data controllers, individuals (data subjects)

Deadlines

• within four (4) weeks of receipt: Statutory timeframe under the Data Protection (Jersey) Law 2018 for an organisation to respond to an individual's objection to processing request.