Withdraw and erase

The portal offers two distinct actions to stop the use of your personal information, purpose by purpose, and a third that covers the whole relationship with a company. Each one requires a fresh assertion of your passkey, exactly the same ceremony as approving a consent: the dialog you read is the one your passkey signs. The actions are idempotent and check the current status first.

These actions cover what rests on your consent. Information the company holds on another basis offers no withdrawal button: the portal shows how to object to it instead.

#Withdraw consent

Withdrawal of consent (retrait du consentement) ends a live consent. It reaches all your live consents for the same purpose with that company; the dialog names them before you sign. It flips each consent to withdrawn and keeps the record that it existed: being able to show that a consent was given and then withdrawn is part of the accountability Law 25 asks for. The withdrawal is also recorded on-chain.

Withdrawal is idempotent: withdrawing an already-withdrawn consent does nothing. Once it is done, the company's very next check denies.

#Request erasure

Erasure is the secondary, guarded control. It is irreversible. Like withdrawal, it reaches all your consents to the same purpose, and it withdraws them at the same time.

Because erasure cannot be undone, the portal presents it as a separate action and confirms it before running it. Like withdrawal, it is idempotent and checks the status before acting.

In three cases, your consent is withdrawn but not erased from Agreely, and the dialog tells you so before you sign:

• the company declared this purpose as resting on another basis than consent when it asked you: it keeps the information on that basis, and your erasure request is recorded as deferred;
• the company indicated it must keep this information under an Act: Agreely will erase it when the company indicates that obligation has ended;
• no basis was recorded for this purpose: destruction is up to the company, and your request is entered in its register, awaiting its decision.

#Closing your account with a company

In a company's detail, Close my account requests the withdrawal of all your consents and the destruction of the information the company holds about you. One signature of your passkey covers the whole, and the portal then shows you, transparently:

• what was destroyed immediately at Agreely (what rested on your consent);
• what is kept, with its reason and, where it applies, its date: information held on another basis is not destroyed now;
• what awaits the company's decision.

Your request is entered in the register of the company's person in charge of the protection of personal information. They must reply in writing no later than 30 days (P-39.1 s. 32), and any refusal must give its reasons and state your remedies (P-39.1 s. 34). In case of disagreement, you can ask the Commission d'accès à l'information to examine it (P-39.1 s. 42). For a public body, the portal cites the corresponding articles of the act that governs it.

Closing is always offered, except when the company is leaving Agreely: its service there being closed, a closure request can no longer be recorded, and you send it in writing to its person in charge. Withdrawal and erasure stay open until its space is destroyed.