The Act allows withdrawal of consent:

Solution

Explanation: The Act empowers individuals (Data Principals) to withdraw consent at any time. This ensures that control over personal data remains with the individual, not the fiduciary. Withdrawal must be as easy as giving consent, and fiduciaries must respect the choice. Once withdrawn, processing based on such consent must stop. This right reflects the principle of autonomy and user control, aligning India’s framework with global best practices like the GDPR and safeguarding individual privacy.