Under GDPR, consent is a freely given, specific, informed and unambiguous indication by which a person agrees to the processing of their data, and it must be as easy to withdraw as it was to give.
Improperly collected consent (pre-ticked box, ambiguous wording) is legally invalid and can invalidate the entire data processing activity that relies on it.
A website offers separate, unchecked boxes for the newsletter and for sharing data with partners.
Assess your organization's maturity on this topic
Start the diagnostic