Valid personal-data consent requires clear, purpose-limited agreement, while withdrawal triggers cessation duties and proof obligations. Consent for personal-data processing must be free, specific, informed, unconditional and unambiguous, based on clear affirmative action, and limited to ... Summary
Valid personal-data consent requires clear, purpose-limited agreement, while withdrawal triggers cessation duties and proof obligations.
Consent for personal-data processing must be free, specific, informed, unconditional and unambiguous, based on clear affirmative action, and limited to data necessary for the stated purpose. Consent requests must be clear, accessible in prescribed languages, and provide relevant contact details. Data Principals may withdraw consent as easily as it was given; the Data Fiduciary and its Data Processors must then cease processing within a reasonable time unless processing is legally required or authorised. Where consent is disputed, the Data Fiduciary must prove compliant notice and consent.
Full Summary is available for active users!
Note: It is a system-generated summary and is for quick reference only.