Withdrawal of consent
A person's right to withdraw consent at any time, as easily as they gave it.
Under the GDPR, a data subject has the right to withdraw consent at any time, and withdrawing must be as easy as giving it. Withdrawal does not make earlier processing unlawful, but processing based on that consent must stop. For agents, withdrawal should reach every system holding a copy of the grant, which in practice means revoking tokens as well as updating a record.
Agent Minute explains this term on 16 December 2026.
Related terms
ConsentA freely given, specific, informed and unambiguous indication of a person's agreement to the processing of their data.RevocationThe principal withdrawing a mandate or consent before it expires, after which no one may act on it.Permission dashboardA place where a customer sees and withdraws the data-access permissions they have granted.Personal dataAny information relating to an identified or identifiable living person.