Consent Withdrawal
What is Consent Withdrawal?
The right of individuals to revoke their previously given consent for data processing, requiring organizations to cease processing based on that consent.
Terms that appear alongside consent withdrawal
Each of these is named in at least one of the same controls as consent withdrawal. The number is how many controls name both.
- consent 9 shared controls
- data subject 5 shared controls
- gdpr 4 shared controls
- compliance 3 shared controls
- lawful basis 3 shared controls
- data minimisation 3 shared controls
- profiling 2 shared controls
- eprivacy directive 2 shared controls
Frameworks that govern consent withdrawal
What the standards actually require on consent withdrawal
Requirements naming consent withdrawal across 6 standards, quoted from the control text.
The controller must enable the data subject to object to processing, withdraw prior consent, and access and update their data, providing the means it considers appropriate to let the data subject do so securely.
jordan-personal-data-protection-law-law-no-24-of-2023::8(F) · Article 8(F): enable objection, consent withdrawal, access and update by safe means →Section 30 of the Kenya DPA establishes the lawful basis framework + Section 29 establishes information notice requirements. (1) Section 30 Lawful Basis - 7 Grounds: (a) Consent of data subject;
KE-DPA-Lawful-Basis-Section30-Consent-Contract-Legal-Vital-Public-Interest-Legitimate-Section29-Notice · Kenya DPA Lawful Basis + Section 30 + Consent + Contract Performance + Legal Obligation + Vital Interests + Public Interest + Legitimate Interests + Section 29 Notice + Express Unequivocal Consent + Withdrawal Right →Article 37: data subjects may request suspension of processing or withdraw consent (for public institutions, for registered files); the controller suspends all or part without delay unless a law requires otherwise, others' interests would be harmed, a public t...
south-korea-pipa::37 · Stop processing or honour consent withdrawal without delay, refusing only on listed grounds →A consumer may ask a data holder for copies of records about it of authorisations, amendments and withdrawals, consent withdrawal notices, disclosures, CDR complaint data and complaints, and may ask an accredited data recipient for copies of records about it c...
competition-and-consumer-consumer-data-right-rules-2020::9.5 · Rule 9.5: give consumers copies of their records within 10 business days, free of charge →Where processing rests on consent the controller must be able to demonstrate it. A consent request inside a written declaration covering other matters must be clearly distinguishable, intelligible, easily accessible and in clear and plain language, and any par...
albania-law-no-124-2024-on-personal-data-protection::8 · Article 8: valid consent and the age of 16 for online services →Withdrawal of consent. Section 13 gives individuals the right to withdraw consent and requires organisations to cease the relevant processing.
BN-PDPO-s13 · Withdrawal of consent →Questions people ask about consent withdrawal
What is Consent Withdrawal?
Why is Consent Withdrawal important for compliance?
Which compliance frameworks address Consent Withdrawal?
Where can I learn more about Consent Withdrawal?
See how Consent Withdrawal applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.