Consent

Consent is a process that must be completed before data may be collected and/or used. The GDPR defines consent as “any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.”

The GDPR also states that consent must be “explicit,” which means it must be given clearly with no room for doubt. It goes on to say that consent can be obtained either by asking for it directly (“Do you agree?”) or through an opt-out mechanism where users are required to actively indicate they do not accept terms and conditions.