gdpr
Does Excessive consents clause hold up against consent requests in GDPR
<p><a href="https://gdpr-info.eu/" rel="nofollow noreferrer">GDPR</a> states that one must record consent <a href="https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/consent/how-should-we-obtain-record-and-manage-consent/" rel="nofollow noreferrer">https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/consent/how-should-we-obtain-record-and-manage-consent/</a>. Ok.Now let us say it takes 256 bytes to store information about the user.There are 1 million users. So if a user gives and widthwraws consent every second it will take - 1 million * 256 *86400 * 365 (~= 8073 terabytes or 8 petabytes) or 366 per year which is infeasable for any small business. Can excessive and manifestly unfound clause hold here <a href="https://www.technologylawdispatch.com/2020/06/data-cyber-security/responding-to-requests-the-ico-considers-manifestly-unfounded-and-excessive-requests/" rel="nofollow noreferrer">https://www.technologylawdispatch.com/2020/06/data-cyber-security/responding-to-requests-the-ico-considers-manifestly-unfounded-and-excessive-requests/</a>      .</p>

<h2>Your premise is absurd</h2>
<p>Your example is manifestly absurd. You say, “<strong>a</strong> user gives and withdraws consent every second” which is clearly stupid because a) a server based solution won’t refresh that quickly, b) your user has nothing better (like sleeping, eating etc.) to do for a year than do this c) who does this? Further, you then apply this to <strong>every</strong> user.</p>
<p>Let’s assume something reasonable: there are 7 billion people in the world, half of them don’t have internet access. Let’s assume you have a wildly successful service and you reach just over half of these or 2 billion and, on average, they opt in and out twice a year so you need 1 kilobyte each (per year) and you keep your data on every user (active or not) for an absurdly long 10 years. That’s 20 petabytes.</p>
<p>At about 0.5 p per Gigabyte per month (and someone storing this much data will get considerably better rates) this is only about £100,000 per month. And, of course, with 2 billion users you aren’t exactly a small business.</p>
<h2>It doesn’t matter if it’s hard or expensive to comply with the law</h2>
<p>Complying with the law is a cost of doing business. If this cost makes your business unprofitable, close your business.</p>
