Section 6(4): The Right to Withdraw Consent & Symmetrical Ease

Statutory Text (Official Gazette)

Section 6(4): Where consent given by the Data Principal is the basis of processing of personal data, such Data Principal shall have the right to withdraw her consent at any time, with the ease of doing so being comparable to the ease with which such consent was given.

What Section 6(4) Means in Plain English

Section 6(4) outlaws one of the most common dark patterns on the web: making it effortless to opt in, but nearly impossible to opt out.

Under this clause, privacy rights are governed by the Symmetrical Ease Principle:

• If a user gave consent with one click on an “Accept” button when landing on your site, they must be able to change or withdraw that consent with one click later.
• If opting in took 3 seconds, opting out cannot require a 10-minute search or submitting a contact form.

What Violates Section 6(4)? (Common Violations)

1. Email-Only Opt-Out: Forcing visitors to email support@company.com to revoke cookie consent while allowing 1-click acceptance.
2. Hidden Preference Links: Burying the cookie preferences button inside a nested sub-menu or third-level account page.
3. Multi-Step Questionnaires: Forcing the user to answer questions (“Why are you leaving?”, “Are you sure?”) before allowing them to disable marketing cookies.
4. Disappearing Widgets: Once the user clicks “Accept”, the banner vanishes permanently with no way for the user to reopen it and change their choices.

Technical Solution: The Persistent Floating Dock

To comply with Section 6(4) on your website:

• Floating Privacy Icon: Display a small, persistent privacy badge or cookie icon in the corner of every page.
• Instant Re-Opening: Clicking the badge must immediately bring up the user’s current settings so they can toggle off marketing or analytics cookies in 1 click.
• Client-Side Script Disablement: Once the user toggles off tracking, your scripts must immediately unblock or clear active tracking cookies without forcing a browser refresh.

← Back to Full Section 6: Consent Guide