Consent To Personal Data Processing Under The GDPR: What It Is, Why You Need It And How To Obtain It

Informing users and obtaining their consent is not something new in data protection regulation. We all have ticked a box to agree to a privacy policy or newsletter subscription. The General Data Protection Regulation (GDPR), however, introduced specific requirements for consent to be a valid basis for processing personal data.

Consent is just one of the legal bases outlined in the GDPR, so if you wish to rely on consent as your legal basis for processing personal data, you need to review your data processing activities and assess which ones will actually be based on consent. As consent is not the only legal basis for processing personal data, it is crucial to assess whether it is the appropriate ground.