Consent
What is Consent?
A lawful basis for processing personal data under GDPR that requires a clear, specific, informed, and unambiguous indication of the data subject's agreement to their data being processed. Consent must be freely given and as easy to withdraw as to give.
Terms that appear alongside consent
Each of these is named in at least one of the same controls as consent. The number is how many controls name both.
- data subject 203 shared controls
- gdpr 171 shared controls
- lawful basis 117 shared controls
- data protection 108 shared controls
- compliance 104 shared controls
- transparency 77 shared controls
- profiling 68 shared controls
- data subject rights 68 shared controls
Frameworks that govern consent
What the standards actually require on consent
Requirements naming consent across 6 standards, quoted from the control text.
On receiving a notice under rule 4.18C or 4.20S that a collection consent has been amended, the data holder must, in accordance with Division 4.4, invite the consumer to amend the authorisation accordingly (civil penalty).
competition-and-consumer-consumer-data-right-rules-2020::4.22A · Rule 4.22A: invite the consumer to amend the authorisation when a consent amendment is notified →With the family's consent, the provider communicates and shares information, knowledge and skills between the family, itself and other collaborating providers, so everyone working with the child has what they need.
australia-ndis-practice-standards-and-quality-indicators::m3-6.3 · Collaboration: information shared across the team with family consent →The entrepreneur tells the council promptly that he intends to give an external expert an advice assignment on a matter within art. 27 (for example a consultant designing a staff monitoring or appraisal arrangement).
netherlands-works-councils-act-wor::31c · Art. 31c Notify the council of an intended external advice assignment on a consent matter →Before giving consent, the data subject must be informed of the right and the method to withdraw consent at any time; withdrawal does not affect the lawfulness of processing before it.
nigeria-data-protection-regulation-ndpr::2.3(2)(c) · Inform of the right and method to withdraw consent before consent is given →The sender of any direct marketing electronic communication specifies a defined marketing purpose, does not disclose the data subject's contact details, and keeps electronic records evidencing the data subject's consent to receive electronic marketing and any...
egypt-personal-data-protection-law-law-no-151-of-2020::Art.18 · Art.18 Duties of the sender: defined purpose, no disclosure of contacts, three-year consent records →An electronic consent artefact must be capable of being logged, audited and verified.
india-account-aggregator-framework-rbi::21 · Para 21: consent artefacts logged, auditable and verifiable →Questions people ask about consent
What is Consent?
Why is Consent important for compliance?
Which compliance frameworks address Consent?
Where can I learn more about Consent?
See how Consent applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.