Where law enforcement processing relies on consent (freely given, specific, informed and unambiguous, by statement or clear affirmative action, defined in section 33(1A)), the controller must be able to demonstrate consent; a written request combined with other matters must be clearly distinguishable, intelligible, accessible and in plain language, and any infringing part does not bind; consent may be withdrawn at any time without affecting earlier processing; before consent is given the data subject must be told of the right to withdraw and withdrawing must be as easy as giving; and freedom of consent takes account of whether a service is made conditional on unnecessary processing. Inserted by section 69 of the Data (Use and Access) Act 2025, in force 19 August 2025; the revised text on legislation.gov.uk does not yet show it, so this leaf was read in the Act's own text.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.