Have you collected and stored the appropriate and necessary consent of the Data Subject?
While ensuring that withdrawal of consent is as easy as giving it.