Governance, Law & Compliance
Consent
Permission from a person for specified collection, use, or processing of their data.
Example
A customer actively agrees to a clearly described use of personal data.
Why it matters
It gives people a meaningful choice about specified uses of their personal information.
You'll hear it
“Can I decline this use without agreeing to something else?”
Can you control it?
Sometimes
Sometimes. An organization can define or influence consent through its policies, processes, contracts, and product choices. Individual users may have fewer controls.
Common questions
- What can make consent invalid?
- Unclear wording, pressure or a choice that is not genuinely optional can undermine consent; legal requirements vary.
- Can consent cover every future use of data?
- Not automatically. A different purpose may require a new choice or another legal justification.
- What should happen when consent is withdrawn?
- When consent is the basis, record the withdrawal and stop the uses that depend on it, as required.