Permission Withdrawal: Auditable Data Consent and Active Session Access

Short answer: treat data consent revocation and active session revocation as separate controls, then...