3 ms·

I’m not a lawyer, but I am my small company’s DPO, and I think you’ve misunderstood. The GDPR specifies six ways you can legally process personal data. Consent

I’m not a lawyer, but I am my small company’s DPO, and I think you’ve misunderstood. The GDPR specifies six ways you can legally process personal data. Consent is one of them. It must be explicit for each usage, in plain language, opt-in, and non-coerced. Non-coerced means you can’t require consent as a condition of access. So, no, consent buried in a 40-page T&C would not count.

JeanMarcS 6y ago
Well, you must be right. I assumed it was what I wrote because the CEO said it was how they gonna get consent. Maybe missing details
shostack 6y ago
Thanks for clarifying my ask. Coercion and legitimate use were my specific concerns.