How can I obtain valid consent?
For consent to be considered valid, it must be:
- freely given;
- specific;
- informed; and
- unambiguous.
This means that individuals must have a genuinely free choice regarding whether or not they agree with the processing of their personal data; they need sufficient information so that they can understand which data is processed, for what purpose, and how this is done; they also need sufficient granularity in consent requests.
In addition, there should be a clear affirmative action from the individual (without pre-ticked boxes and made separately from applicable general conditions).
In addition, individuals need to be able to freely withdraw their consent (without any negative consequences) if they change their mind later on.
More information: