GDPR

Consent

Under GDPR, consent is a freely given, specific, informed and unambiguous indication by which a person agrees to the processing of their data, and it must be as easy to withdraw as it was to give.

Why it matters

Improperly collected consent (pre-ticked box, ambiguous wording) is legally invalid and can invalidate the entire data processing activity that relies on it.

Concrete example

A website offers separate, unchecked boxes for the newsletter and for sharing data with partners.

Related notions

Legal basisCookiesWithdrawal of consent

Assess your organization's maturity on this topic

Start the diagnostic
Back to glossary