GDPR - Right to Object - Right to Object Procedures

Recital - 69.
Right to Object
Executive Summary
If a data subject objects to the use of their data the obligation is on the controller to demonstrate why they might need to.
Recital Text
Where personal data might lawfully be processed because processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or on grounds of the legitimate interests of a controller or a third party, a data subject should, nevertheless, be entitled to object to the processing of any personal data relating to his or her particular situation.It should be for the controller to demonstrate that its compelling legitimate interest overrides the interests or the fundamental rights and freedoms of the data subject.
Executive Summary
Policies and procedures should be created for allowing a data subject to object if they request it. This includes procedures to ensure their personal data is no longer processed.