What are the GDPR conditions for consent?

Consent is one of the lawful bases for data processing under the GDPR. The  four conditions of consent as defined in Article 7 GDPR are:

  • Data controllers should be able to demonstrate proof of consent by keeping a record of user consent.
  • The request for consent should be clearly distinguishable from the other matters and should also be made available in an intelligible and easily accessible way, using clear and plain language. 
  • Consent can be withdrawn at any time and users should be made aware of this right before granting consent. Withdrawing consent should be as easy as giving consent.
  • When assessing whether consent has been freely given or not, it should be taken into account whether the fulfilment of the contract or providing the service was dependent on consent for processing the user’s personal data, which is not directly relevant to the stated purpose.