The data controller shall ensure that it is as easy for the data subject to withdraw, as to give consent.