Skip to content

Implied Consent

What is Implied Consent?

Consent inferred from an individual's actions or inaction rather than explicit agreement, with limited applicability under strict privacy regulations.

Privacy and Data Protection

What the standards actually require on implied consent

Requirements naming implied consent across 4 standards, quoted from the control text.

s.10(9): implied consent may exist through an existing business relationship or existing non-business relationship (within defined time limits), conspicuous publication, or disclosure of the address without a do-not-contact notice.

CASL-3 · Implied Consent →

No one holds a recording of a private conversation or activity knowing it was obtained, directly or indirectly, by use of a listening, optical surveillance or tracking device in breach of Part 2. Maximum penalty for a corporation 500 penalty units;

nsw-surveillance-devices-act-2007::12 · s 12 No possession of a record known to be obtained unlawfully →

No one knowingly installs, uses or maintains a tracking device to find where a person is without that person's express or implied consent, or where an object is unless whoever lawfully possesses or controls it has given express or implied consent.

victoria-surveillance-devices-act-1999::8 · s 8 No tracking device without the consent of the person or the object's lawful possessor →

A person must not communicate or publish to anyone a private conversation, or a report of its substance, meaning or purport, that has come to the person's knowledge directly or indirectly through a listening device used in breach of s 43.

queensland-invasion-of-privacy-act-1971::s 44(1) · s 44(1) Do not communicate or publish a private conversation obtained through unlawful use of a listening device →

Questions people ask about implied consent

What is Implied Consent?
Consent inferred from an individual's actions or inaction rather than explicit agreement, with limited applicability under strict privacy regulations.
Why is Implied Consent important for compliance?
Implied Consent is a key concept in Privacy and Data Protection. Understanding implied consent helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Implied Consent?
Implied Consent appears in the requirement text of Canada's Anti-Spam Legislation (CASL), NSW Surveillance Devices Act 2007, Victoria Surveillance Devices Act 1999, Queensland Invasion of Privacy Act 1971. Across these standards we have identified 14 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Implied Consent?
Explore our compliance framework pages to see how implied consent applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Implied Consent applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.