In short
Consent management is obtaining, recording and honoring individuals' choices about how their personal data is used. Under European rules, consent must be freely given, specific, informed and unambiguous, and as easy to withdraw as to give.
Key takeaways
- Opt-in requires a positive action before data is used; opt-out allows use until the person objects.
- Records of when and how consent was given are needed to prove it.
- Consent is only one legal basis for processing; others include contracts and legal obligations.
Where it's tested
ISC: Privacy & Regulatory Frameworks — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
Under a consent-based privacy model, an organization that wishes to use personal data for a new purpose not disclosed at collection should: