I don't think it works like this. If your argument for GDPR compliance is that you have your user's consent, it is required that the consent was freely given, w

I don't think it works like this. If your argument for GDPR compliance is that you have your user's consent, it is required that the consent was freely given, when it was collected is orthogonal to that.