SCENARIO F03 · NOTICE, PURPOSE & CONSENT
A customer can consent in one tap but must open a support ticket to withdraw. What should the team test?
IN PLAIN ENGLISH
Why you are seeing this step
This field note uses one realistic decision to separate the official source, an editorial interpretation, a practical option, evidence to keep, and any uncertainty that still depends on your facts.
Educational only, not legal advice. Source status is dated 13 May 2027; inspect the official links below before relying on it.
BEST NEXT STEP
Make withdrawal comparably easy and verify that processors stop the consent-based processing.
Test the person-facing control, internal decision and processor instructions. Existing lawful processing before withdrawal is a separate question.
WHY THE OTHER INSTINCTS MISS
Make withdrawal comparably easy and verify that processors stop the consent-based processing.
Correct. Act section 6(4) requires comparable ease, and section 6(6) addresses cessation by the fiduciary and processors.
Keep the ticket flow if support normally replies quickly.
Response speed does not make a materially harder withdrawal path comparable to one-tap consent.
Remove the withdrawal control once an order has started.
Withdrawal consequences can be explained, but the right to withdraw the consent basis does not disappear.
BUILD THIS EVIDENCE
Withdrawal journey test, timestamped instruction and processor completion record.
This artefact supports review. It does not certify compliance or replace advice on your facts.
- Guidance type
- legal requirement
- Pinpoint
- Act s. 6(4)–(6); G.S.R. 843(E)
- Reviewed
- 2026-08-30
- Change note
- Status and pinpoint reviewed against the official Act, final Rules, commencement notification and corrigendum for this educational website.
OFFICIAL SOURCE TRAIL
Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) ↗
Definitions and specified machinery provisions are operative; most substantive duties and rights are notified for later commencement. Check each scenario's status record.
Act s. 1(2); provision-specific section pinpointsDPDP Act commencement notification G.S.R. 843(E) ↗
Appoints immediate, one-year and eighteen-month commencement cohorts for the Act.
G.S.R. 843(E), clauses (a)–(c)