Revoking consent: A ‘blind spot’ in data protection law? · Study