I don’t like that when I read the Basecamp news and had a visceral reaction, my first thought was, “Will my commit access be revoked if I share what’s on my mind?” It’s incredibly unclear what mechanisms exist to remove commit access from someone against their will, and also unclear what recourse those people can take to get it re-instated.

Furthermore, the data subject shouldbe able to withdraw his/her consent without detriment. This means, inter alia, that a controller mustmake withdrawal of consent possible free of charge or without lowering service levels.