How fast must I act on a withdrawal?

Within a reasonable time. Define a concrete internal timeframe and ensure your processors stop within it too.

Can I keep any data after withdrawal?

Only what a law requires you to retain. Everything processed solely on the withdrawn consent should stop and, where appropriate, be erased.

Free template · Withdrawal

Consent withdrawal handling template

A free template for handling consent withdrawal under DPDPA Section 6(4): the acknowledgement, internal workflow and confirmation.

In short

This template covers consent withdrawal end to end: an acknowledgement to the data principal, the internal steps to stop processing and notify processors within a reasonable time, and a confirmation message, so withdrawal is as easy as giving consent as Section 6(4) requires.

Acknowledgement to the data principal

Subject: We have received your request to withdraw consent

Hello [NAME], we have received your request to withdraw consent for [PURPOSE(S)] on [DATE]. We will stop the related processing within [TIMEFRAME] and confirm once done. This will not affect processing we are legally required to continue.

Internal workflow

1. Log the withdrawal with timestamp and the purposes affected.

2. Stop the related processing in [SYSTEMS], and disable the relevant trackers/marketing flags.

3. Notify Data Processors [LIST] to cease processing the affected data.

4. Apply retention rules: erase data no longer needed, unless a law requires retention.

5. Record completion and send the confirmation below.

Confirmation to the data principal

Subject: Your consent withdrawal is complete

Hello [NAME], we have stopped processing your personal data for [PURPOSE(S)] as requested. Any data we are legally required to retain is kept only for that purpose. You can give consent again at any time at [LINK].

Get the full template

Enter your email to unlock the complete, copy-ready consent withdrawal handling template.

Automate this with ConsentX All templates

Consent withdrawal handling template FAQs

ConsentX

Consent withdrawal handling template FAQs