Consent

From Open Risk Manual

Definition

In Data Protection context and terminology, Consent refers to any freely given, specific and informed indication of the wishes of a Data Subject, by which he/she agrees to Personal Data relating to him/her being processed (see Article 4 sub 11 of Regulation (EU) 2016/679 and Article 3 sub 15 of Regulation (EU) 2018/1725).

Consent is an important element in Data Protection legislation, as it is one of the conditions that can legitimise processing of personal data. If it is relied upon, the data subject must unambiguously have given his/ her consent to a specific processing operation, of which he/she shall have been properly informed.

The obtained consent can only be used for the specific processing operation for which it was collected, and may in principle be withdrawn without retroactive effect.

References