Part 4: Intelligence services processing Chapter 3: Rights of data subjects Section 99: Right to object to processing
This section allows a data subject to require the controller not to process the subject’s personal data on the grounds that the processing is an unwarranted interference with their interests or rights. Upon receipt of such a request, a controller has 21 days to comply or respond with their reasons for not complying.
	If the controller does not comply with the request, the data subject may apply to the High Court (or, in Scotland, the Court of Session), which may order the controller to take steps in complying with the request (so far as the court considers is necessary). Under subsection (6) a court may make an order under subsection (5) in relation to a joint controller whose responsibilities are determined in an arrangement under section 104 only if the controller is responsible for compliance with the obligation to which the order relates. In practice, this means that any order made by the court must be consistent with the responsibilities assigned to a controller under a joint controller agreement.