Article 7 - Conditions for consent

Article 7 of the GDPR sets the requirements for valid consent, stating that it must be freely given, specific, informed and unambiguous, demonstrated by a clear affirmative act. It also obliges controllers to provide clear information about the purposes of processing and to keep records of how and when consent was obtained. Consent may be withdrawn at any time and must be as easy to withdraw as to give.