The GDPR has much stricter consent requirements than the current legislation.
This means that implied consent doesn’t work anymore. Consent must be explicit and freely given. It’s opt-in; never opt-out.
Furthermore, you must clearly inform the individual what you will use their data for. The explanation should be given in plain language. The consent is valid only for those specified purposes. If you wish to expand the use of the data, you need additional consent.
Read more about best consent practices and other grounds for processing in this article. Find out what not to do in this handy guide.
