02a. Collection consent withdrawal - AP holding collected data as a data holder