Right to withdraw consent
Where processing is based on consent, data subjects have the right to withdraw that consent at any time. Withdrawal must be as easy as giving consent. It does not affect the lawfulness of processing that occurred before the withdrawal. Once consent is withdrawn, the controller must stop processing for that purpose unless another lawful basis applies. Controllers must inform data subjects of their right to withdraw consent before consent is given.
DPA reference
Data Protection Act 2020
Related terms in Rights
Right of access
The right to obtain confirmation that your personal data is being processed and receive a copy of it.
Right to data portability
The right to receive your personal data in a structured, machine-readable format and transfer it to another controller.
Right to erasure
The right to request deletion of your personal data in certain circumstances.
Right to object
The right to object to the processing of your personal data for certain purposes.