A data subject shall have the right to withdraw, at any time, consent to the processing of personal data under this Act.