How should consent withdrawal be recorded in logs?

ANSWER

Reference is made here to ICO guidance. The UK supervisory authority indicates that the content of data should not be recorded in deletion logs, as there is no need to retain a duplicate of data that has been deleted. The requirement is to create metadata showing, for example, what was deleted. This does not need to specify the content of the record or information that was modified – it may simply note that record X was updated by a specific person.