13. Withdrawal of consent

( 1) On giving reasonable notice to the organisation, an individual may at any time withdraw any consent given, or deemed to have been given under this

Order, in respect of the collection, use or disclosure by that organisation of personal data about the individual for any purpose.

On receipt of the notice referred to in subsection (1), the organisation concerned shall inform the individual of the likely consequences of withdrawing his consent.

No organisation shall prohibit an individual from withdrawing his consent to the collection, use or disclosure of personal data about the individual, but this section does not affect any legal consequences arising from such withdrawal.

Subject to section 23, if an individual withdraws consent to the collection, use or disclosure of personal data about the individual by an organisation for any purpose, the organisation shall cease (and cause its data processors and agents to cease) collecting, using or disclosing the personal data, unless such collection, use or disclosure without the consent of the individual is required or authorised under this Order or any other written law.