OneTrust Certified Privacy Professional Practice Exam

Is it true or false that under GDPR, consent must be as easy to withdraw as it is to give in order to be valid?

1. True

2. False

3. Depends on the context

4. Only for minors

The correct answer is: True

Under GDPR, it is indeed true that consent must be as easy to withdraw as it is to give for it to be considered valid. This principle is rooted in the GDPR's emphasis on user autonomy and the protection of personal data. The regulation stipulates that individuals must have clear and straightforward methods to withdraw their consent at any time. This ensures that consent is not only freely given but can also be easily retracted, reflecting a genuine choice. This requirement reinforces the notion that individuals should have ongoing control over their personal data, aligning with the GDPR's objectives of transparency and user rights. If withdrawing consent is a cumbersome or complex process, it undermines the initial act of providing consent, thereby rendering it invalid. Thus, the condition that withdrawal must be as easy as giving consent is fundamental to the validity of consent under the regulation.