Consent withdrawn: GDPR requirements and data protection-compliant practice

The General Data Protection Regulation (GDPR) sets out clear requirements for consent to data processing. Data subjects have the right to withdraw their consent at any time. This applies to all types of data processing based on consent, such as the storage of contact data, the use of cookies or the processing of user data by third parties. The revocation must be simple and transparent so that affected persons can exercise their rights. Companies are obliged to enable the revocation and to terminate the data processing accordingly. The GDPR also requires that consent is not preset or enforced in a way that affects the data subject’s freedom of choice.

Consent must therefore always be given clearly, comprehensibly and voluntarily. Companies should therefore provide clear opt-in and opt-out mechanisms that are easily accessible and easily traceable. This includes, for example, links or buttons that enable the revocation directly, as well as information about the type and extent of the data processing. The GDPR not only protects the rights of users, but also the reputation and trust of companies.

## What does this mean for your company? Your company must ensure that all consents are easily revocable and that GDPR requirements are fully met. This includes clear information obligations, transparent opt-in and opt-out mechanisms and the possibility to terminate data processing as soon as consent is revoked. It is important that data subjects know at all times what data is processed and how they can exercise their rights. This not only protects against legal risks, but also strengthens the trust of your customers and employees.

## How ISN/xynap supports this The infrastructure is GDPR compliant and supports companies in implementing data protection compliant solutions. By complying with the requirements of Art. 7 para. 3 DSGVO ensures that consents can be made transparent and revocable.