Service provider needs to be able to ask the DE to forget a consumer. Only authorized SPs should be allowed to do this. The DE may either delete all data associated with the consuer or render that data non-personal.

The DE should keep a record of which consumers have been forgotten (for possible audit by Coelition).