What makes consent valid under GDPR?

Tap to reveal answer

Answer

It must be freely given, specific, informed, and unambiguous.

Pre-ticked boxes, bundled consent, or no real choice can undermine validity.

GDPR, Regulation (EU) 2016/679

Deep dive

Valid consent: four pillars, one trap

Consent must be freely given, specific, informed, and unambiguous; the main exam trap is bundled or pre-ticked consent, which fails the 'freely given' test.

Learn more

Listen to this page (beta)

Lawful bases Data breach clock

View all flashcards

We use essential cookies to run the site. With your permission, we also use analytics and personalized advertising. Advertising consent allows us to share hashed contact details and location details with Google to match trial and lifetime conversions. Read our Privacy Policy.

What makes consent valid under GDPR?

It must be freely given, specific, informed, and unambiguous.

Valid consent: four pillars, one trap

Report an issue

Issue reported