Data controllers and processors should examine the legal basis on which they currently process personal data. There are six legal grounds where a controller or processor may process personal data.
Is consent the right legal basis or would another legal basis be more appropriate? Here at Privacy Consultants, we are happy to advise you on such queries.
The definition of consent has changed under the GDPR. Consent must be “freely given, specific, informed, and unambiguous… either by a statement or by a clear affirmative action”.
The GDPR also introduces stricter rules on obtaining consent including;
- Opt-in consent is only recognised; no opt-out consent is permitted
- Controllers need to be able to demonstrate obtained consent
- Data subjects must be aware of the extent of the processing to which they have consented
- Data subjects have the right to withdraw consent at any time, without prejudice
- Data subjects must inform them about their rights of withdrawal
- Explicit consent is required for sensitive personal data
Whatever you need, Privacy Consultants have you covered.
Contact us for a fixed price that suits you.