Guidelines > Guidelines on consent under Regulation 2016/679

Guidelines on consent under Regulation 2016/679

Adopted on 4 May 2020: EUR-lex.

The European Data Protection Board

0. PREFACE

1. INTRODUCTION

2. CONSENT IN ARTICLE 4(11) OF THE GDPR

3. ELEMENTS OF VALID CONSENT

3.1 Free / freely given [12]

3.1.1 Imbalance of power

3.1.2 Conditionality

3.1.3 Granularity

3.1.4 Detriment

3.2 Specific

3.3 Informed

3.3.1 Minimum content requirements for consent to be ‘informed’

3.3.2 How to provide information

3.4 Unambiguous indication of wishes

4. OBTAINING EXPLICIT CONSENT

5. ADDITIONAL CONDITIONS FOR OBTAINING VALID CONSENT

5.1 Demonstrate consent

5.2 Withdrawal of consent

6. INTERACTION BETWEEN CONSENT AND OTHER LAWFUL GROUNDS IN ARTICLE 6 GDPR

7 SPECIFIC AREAS OF CONCERN IN THE GDPR

7.1.1 Information society service

7.1.2 Offered directly to a child

7.1.3 Age

7.1.4 Children’s consent and parental responsibility

7.2 Scientific research

7.3 Data subject’s rights

8. CONSENT OBTAINED UNDER DIRECTIVE 95/46/EC