A data subject shall have the right to withdraw, at any time, consent to the processing of personal data under this Act.

The data controller shall ensure that it is as easy for the data subject to withdraw, as to give consent.