Regarding #2 - yes, the new stuff around for GDPR can do that: accept, decline and after that: withdraw/reconsider. And with some of them you can set as many different types to accept or reject individually. You can see it implemented on ICO site or ...