Consent
What is Consent?
A lawful basis for processing personal data under GDPR that requires a clear, specific, informed, and unambiguous indication of the data subject's agreement to their data being processed. Consent must be freely given and as easy to withdraw as to give.
Terms that appear alongside consent
Each of these is named in at least one of the same controls as consent. The number is how many controls name both.
- data subject 203 shared controls
- gdpr 171 shared controls
- lawful basis 117 shared controls
- data protection 108 shared controls
- compliance 104 shared controls
- transparency 77 shared controls
- profiling 68 shared controls
- data subject rights 68 shared controls
Frameworks that govern consent
What the standards actually require on consent
Requirements naming consent across 6 standards, quoted from the control text.
Handlers may not disclose the PI they handle unless they obtain separate consent.
PIPL-Art25 · Public Disclosure Prohibited Without Consent →Personal data may not be processed without the explicit consent of the data subject, unless one of the exceptions in Art 5(2) applies. Consent must be informed, specific to the processing, and freely given.
KVKK-Art5-1 · Explicit Consent as Lawful Basis →Consent from minors under 10 requires holder of parental responsibility. Minors 10-20 require parental consent unless transaction is appropriate for age.
Section 20 · Consent for Minors →Where consent is the lawful basis and information society services are offered directly to a child, processing the child's personal data on the child's own consent is lawful only from age 16, or from the lower age a Member State has set in law, which may be no...
GDPR-Art.8 · Conditions applicable to child's consent →Standard 1 per Section 19 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be processed fairly + lawfully + transparently.
JM-DPA2020-Standard1-Fair-Lawful-Transparent-Sec19-Lawful-Basis-Consent-Contract-Legal-Vital-Public-Interest-Legitimate · Jamaica DPA 2020 Standard 1 - Fair + Lawful + Transparent Processing + Section 19 + Lawful Basis + Consent + Contract Performance + Legal Obligation + Vital Interests + Public Interest + Legitimate Interests + Privacy Notices →Where an operator collects personal information from students in the educational context, a school may authorise the collection in lieu of parental consent, provided the information is used only for a school-authorised educational purpose and not for any comme...
COPPA-312.5-SCH · School Authorization in Lieu of Parental Consent →Questions people ask about consent
What is Consent?
Why is Consent important for compliance?
Which compliance frameworks address Consent?
Where can I learn more about Consent?
See how Consent applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.