Consent Withdrawal
What is Consent Withdrawal?
The right of individuals to revoke their previously given consent for data processing, requiring organizations to cease processing based on that consent.
Terms that appear alongside consent withdrawal
Each of these is named in at least one of the same controls as consent withdrawal. The number is how many controls name both.
- consent 9 shared controls
- data subject 5 shared controls
- gdpr 4 shared controls
- compliance 3 shared controls
- lawful basis 3 shared controls
- data minimisation 3 shared controls
- profiling 2 shared controls
- eprivacy directive 2 shared controls
Frameworks that govern consent withdrawal
What the standards actually require on consent withdrawal
Requirements naming consent withdrawal across 6 standards, quoted from the control text.
Section 30 of the Kenya DPA establishes the lawful basis framework + Section 29 establishes information notice requirements. (1) Section 30 Lawful Basis - 7 Grounds: (a) Consent of data subject;
KE-DPA-Lawful-Basis-Section30-Consent-Contract-Legal-Vital-Public-Interest-Legitimate-Section29-Notice · Kenya DPA Lawful Basis + Section 30 + Consent + Contract Performance + Legal Obligation + Vital Interests + Public Interest + Legitimate Interests + Section 29 Notice + Express Unequivocal Consent + Withdrawal Right →Withdrawal of consent. Section 13 gives individuals the right to withdraw consent and requires organisations to cease the relevant processing.
BN-PDPO-s13 · Withdrawal of consent →Electronic communication for direct marketing to a data subject is prohibited unless: the data subject's consent is obtained; the communication includes the sender's identity; the sender has a valid and complete contactable address;
EGY-PDPL-Art.17 · Conditions for direct electronic marketing →The organization must record transfers of personal data to and from third parties and ensure cooperation with those parties to support future requests arising from its obligations to individuals, which includes transfers from third parties of data modified as...
iso-27701-2019::7.5.3 · Records of transfer of PII →Articles 16-19 of UU PDP establish the foundational lawful processing framework. Article 16: lawful basis for processing personal data limited to (a) explicit valid consent of the Data Subject for one or more specific purposes;
IDPdp-LawfulBasis-Notice-Consent-PurposeLimitation-DataMinimisation-Art16to19-ExplicitConsent · Indonesia PDP Articles 16-19 + Lawful Basis + Notice + Explicit Consent + Purpose Limitation + Data Minimisation + 6 Lawful Bases + Withdrawal + Transparency →Articles 121-132 of Codice Privacy implement EU ePrivacy Directive (2002/58/EC + 2009/136/EC) and provide Italian-specific electronic communications privacy rules.
ItalyCodice-ePrivacy-Cookies-ElectronicCommunications-Telemarketing-PublicOpposition-TrafficDataRetention-Art121-122-130-132 · Italy Codice ePrivacy - Article 121 Electronic Communications + Article 122 Cookies and Tracking + Article 130 Unsolicited Direct Marketing + Article 132 Traffic Data Retention + Italian Public Opposition Register (Registro delle Opposizioni) →Questions people ask about consent withdrawal
What is Consent Withdrawal?
Why is Consent Withdrawal important for compliance?
Which compliance frameworks address Consent Withdrawal?
Where can I learn more about Consent Withdrawal?
See how Consent Withdrawal applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.