For surveillance on legitimate interest or public task, a person may object at any time on grounds of their particular situation, when entering, while in or after leaving the area, and processing of their data must stop unless the controller shows compelling legitimate grounds; responses are due without undue delay and within one month. In practice, monitoring an area where people are identifiable is lawful only if the controller can stop the camera processing immediately on request or the area is restricted so that approval is obtained before entry and it is not an area the person is entitled to enter as a citizen. For direct marketing the right to object is absolute.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.