withdrawal of permission to process personal data

Hi there!

Excellent question. Sometimes withdrawing consent means that you’ll need to delete the data (storing data === processing data, therefore you no longer have the right to store it). Other times, as you described, you’ll need to flag it somehow and not use it for a certain purpose.

There’s a solution for this which requires custom development. Every time someone withdraws a consent, the ‘gdpr/consent/withdraw’ action is triggered. You can hook into that action and fire some custom code.
See https://codelight.eu/wordpress-gdpr-framework/developer-docs/

But creating a catch-all solution that would be helpful regardless of which plugins or tools you are using but NOT require coding is something I haven’t figured out how to build. If you have any ideas, I’m all ears!