• Supporting clients through COVID-19 and Brexit

  • Supporting clients through COVID-19 and Brexit

  • Brachers
  • Home
  • COVID-19
  • Insights
  • Our People
  • Careers
  • About Brachers
    • Our Story
    • Awards and Accreditations
    • Corporate Social Responsibility
  • Events
  • Pay online
  • Conveyancing quote
  • Contact us
    • Solicitors in Maidstone
    • Solicitors in Canterbury
  • Personal Law
    • Personal Law
    • Court of Protection
    • Dispute Resolution
    • Employment Law Advice
    • Family and Divorce
    • Medical Negligence
    • Personal Injury and Industrial Disease
    • Powers of Attorney
    • Property and Conveyancing
    • Tax Planning
    • Trusts
    • Wills and Probate
  • Business Law
    • Business Law
    • Commercial Law
    • Commercial Dispute Resolution
    • Commercial Property Law
    • Corporate, Banking and Finance
    • Debt Recovery
    • Defending Industrial Disease Claims
    • Employment Law & HR Support
    • Environmental Law
    • Insolvency
    • Licensing Law
    • Planning Law
    • Regulatory Law
  • Sector Support
    • Sector Support
    • Agriculture and Rural
    • Charities
    • Construction
    • Education
    • Healthcare
    • Life Sciences
    • Primary Care
    • Property Managers, Investors and Landlords
    • 01622 690691
    • Pay Online
    • Conveyancing Quote
    Brachers
  • Brachers
    • COVID-19
    • Insights
    • Our People
    • Careers
    • About Brachers
      • Our Story
      • Awards and Accreditations
      • Corporate Social Responsibility
    • Events
    • Contact Us
      • Maidstone office
      • Canterbury office
    •  
  • Personal Law
  • Business Law
  • Sector Support
  • Court of Protection
    • Court of Protection
    • Benefits Advice for Financial Attorneys and Deputies
    • Financial Deputy Applications Advice
    • Gifting Applications
    • Professional Financial Attorney and Deputy
    • Statutory Will Applications
    • Welfare Applications
  • Dispute Resolution
    • Dispute Resolution
    • Alternative Dispute Resolution ‘ADR’
    • Consumer Disputes
    • Landlord and Tenant Disputes
    • Professional Negligence Disputes
    • Property & Land Law Disputes
    • Wills, Trusts and Probate Disputes Solicitors
  • Employment Law Advice
    • Employment Law Advice
    • Director Disputes
    • Disciplinary, Capability, Sickness and Grievance Issues
    • Settlement Agreements
    • Tribunal Claims Advice and Representation
  • Family and Divorce
    • Family and Divorce
    • Arbitration
    • Children Law
    • Civil Partnership
    • Collaborative Law
    • Divorce
    • Financial Settlement on Divorce
    • Injunctions
    • Cohabitation
    • Mediation
    • Pre and Post Nuptial Agreement
  • Medical Negligence
    • Medical Negligence
    • Accident and Emergency Claims
    • Birth Injury Claims
    • Cancer Diagnosis Claims
    • Cardiac and Vascular Claims
    • Child Injury Claims
    • Cosmetic Surgery Claims
    • Fatal Injury Claims and Inquest Representation
    • Medical Negligence FAQs
    • Ophthalmic Claims
    • Orthopaedic and Spinal Injury Claims
  • Personal Injury and Industrial Disease
    • Personal Injury and Industrial Disease
    • Asbestos Disease
    • Fatal Accident Claims
    • Head Injury
    • Mesothelioma Claims
    • Other Industrial Disease Claims
    • Other Personal Injury Claims
    • Post Traumatic Stress Disorder/Psychiatric Injury Claims
  • Powers of Attorney
    • Powers of Attorney
    • Elderly and Vulnerable
  • Property and Conveyancing
    • Property and Conveyancing
    • Buying and Selling Residential Property
    • Declarations of Trust
    • Equity Release
    • Mortgages
    • Lease Extensions
    • Occupiers and Tenants Law
    • Plot Sales
    • Residential Tenancies
    • Transfer of Equity
    • Joint Tenancy or Tenancy in Common
  • Tax Planning
  • Trusts
    • Trusts
    • Brachers Trust Corporation
    • Setting up a Trust
    • Trust Management Services
  • Wills and Probate
    • Wills and Probate
    • Probate and Estate Administration Solicitors
    • Wills
    • Wills, Trusts and Probate Disputes Solicitors
  • Coronavirus Support for Families and Individuals
  • Commercial Law
    • Commercial Law
    • Commercial Agreements
    • Commercial Projects
    • Information Technology
    • Intellectual Property (IP)
  • Commercial Dispute Resolution
    • Commercial Dispute Resolution
    • Alternative Dispute Resolution ‘ADR’ for Business
    • Business to Business Disputes
    • Contract Disputes
    • Corporate Disputes
    • Intellectual Property and Technology Disputes
    • Partnership Disputes
    • Property and Land Disputes
  • Commercial Property Law
    • Commercial Property Law
    • Finance Advice for Commercial Property
    • Occupiers and Tenants
    • Property Managers, Investors and Landlords
    • Property Developers
  • Corporate, Banking and Finance
    • Corporate, Banking and Finance
    • Shareholder Arrangements and Share Option Schemes Advice
    • Corporate Banking Law and Asset-Based Lending
    • Corporate Restructures and Demergers
    • Legal Advice for Joint Venture Companies
    • Mergers, Acquisitions and Disposals
    • Partnership and LLP
    • Private Equity and Venture Finance
  • Data Protection and GDPR
  • Debt Recovery
    • Debt Recovery
    • Credit Management
    • Portfolio Management and Outsourcing
    • Consumer Collections and Recoveries
  • Defending Industrial Disease Claims
    • Defending Industrial Disease Claims
    • Defending Asbestos Claims
    • Defending Hearing Loss / Deafness Claims
  • Employment Law & HR Support
    • Employment Law & HR Support
    • Brachers Protect
    • Employment Contracts
    • Discrimination, Discipline, Dismissals & Grievances
    • Employee Exits and Settlement Agreements
    • Employment Law Developments
    • Employment Law Training
    • Employment Tribunal Claims
    • Industrial Relations
    • Redundancy, Reorganisation & Restructuring
    • Restrictive Covenants
    • TUPE Law
    • Wellbeing at Work
    • Workplace Wellbeing Review
  • Environmental Law
  • Insolvency
    • Insolvency
    • Services to Businesses & Company Directors
    • Services to Creditors
    • Services to Insolvency Practitioners
  • Licensing Law
  • Planning Law
  • Regulatory Law
    • Regulatory Law
    • Criminal Prosecution Law
  • Coronavirus Support for Businesses
  • Agriculture and Rural
    • Agriculture and Rural
    • Commercial Law in Rural Business
    • Corporate Law in Rural Business
    • Employment Law in Rural Business
    • Family Law in Rural Business
    • Health and Safety Law in Rural Business
    • Planning & Environmental Law
    • Rural Property and Buildings Law
    • Secured Lending in Rural Business
    • Solving Disputes in Rural Business
    • Succession Planning for Farming Businesses
  • Charities
    • Charities
    • Charity Mergers and Collaboration
    • Funding Advice for Charities
    • HR Advice for Charities
    • Kent Good Governance Charity Forum
    • Organisational Review for Charities
    • Setting up a Charity or Social Enterprise Legal Advice
  • Construction
    • Construction
    • Construction Disputes
    • Construction Project Documentation
  • Education
    • Education
    • Academy conversions and free schools
    • Development and Expansion
    • Education Matters Forum
    • Freedom of Information and Data Protection
    • Governance, Complaints and Appeals Law in Education
    • Legal Advice when Purchasing Goods and Services for Schools
    • Legal Advice for School Premises
    • Legal Advice for Staff Management
  • Healthcare
    • Healthcare
    • NHS
    • Independent Healthcare Providers
    • Legal Support for Care Providers
    • Medical Defence
  • Life Sciences
  • Primary Care
    • Primary Care
    • Commercial and NHS Contracts
    • Employment & HR Law for GPs
    • GP Federations Advice
    • GP Partnership Agreements
    • GP Premises
    • New Premises, Development & Expansion
  • Real Estate
    • Property Managers, Investors and Landlords
    • Property Developers

Home > Insights > Updated guidance on GDPR consent

  • Insights
    Insight - Commercial Law, Data Protection and GDPR - POSTED: January 19 2018

    Updated guidance on GDPR consent

    What guidance do we have on the issue of consent under the GDPR?

    • Share this article
      Share
    • Print this article
  • What guidance do we have on the issue of consent under the GDPR?

    The Article 29 Working Party has published guidance in relation to consent under the new General Data Protection Regulation (GDPR). This article summarises the main points which come out of this.

    The starting point when considering data processing is to remember that consent is still one of the lawful bases for processing personal data under the GDPR, but there are 6 other lawful bases’ which may be relied on. If you rely on consent as the legal basis for processing personal data, you must also comply with the principles of processing relating to fairness and proportionality, for example. These principles are not looked at further by the guidance.

    What is consent and how should it be sought?

    Consent is defined under the GDPR as ‘any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by clear affirmative action, signifies agreement to the processing of personal data relating to him or her.’

    Freely given

    Consent must be freely given, which means that there must be a genuine choice for the data subject to say yes or no to the processing. Consent is unlikely to be valid if saying no would have negative consequences for the data subject.

    Given that there is likely to be an imbalance of power in the working environment, it is unlikely that consent as a lawful basis for processing will be appropriate in the majority of employment contexts. However, there may be exceptional circumstances. The question to ask is whether the employee is really able to freely give their consent.

    Special caution is needed when a contract has a request for consent to process personal data tied to it, for example as may be included in an employment contract.

    If multiple processing operations are to happen for more than one purpose, the data subject should be free to choose which purpose they accept.

    Specific consent

    Consent must be given to one or more specific purposes and a choice must be available to consent to each of them. Before this is sought, a specific, explicit and legitimate purpose for the intended processing must be determined.

    In order then for consent to be specific, the data subject must be specifically informed of the intended purposes of the data use. If the data is to be used for a new purpose, the process of getting consent must be done again.

    Informed

    As touched on above, the data subject must give informed consent. Therefore the controller must provide the data subject with accessible information prior to gaining consent.

    The guidance states that such information should at least include the identity of the controller, the purpose of each of the processing operations for which consent is sought, what type of data will be collected and used, the existence of the right to withdraw consent, information about the use of the data for decisions based solely on automated processing and, if appropriate, information on the possible risks of data transfers to third countries.

    Clear and plain language should be used taking into account the intended recipient.

    Unambiguous intention of wishes

    Consent requires a statement or clear affirmative action from the data subject. The use of pre-ticked opt in boxes is invalid, as will be relying on the data subject’s silence.

    Explicit Consent

    Special categories of data as specified in the GDPR, data transferred to third countries or international organisations in the absence of adequate safeguards or cases of automated decision making will require explicit consent, i.e. an express statement of consent.

    Additional Requirements

    The GDPR contains specific provisions on keeping records of consent and the data subject’s right to withdraw consent. It is suggested good practice to refresh consent at appropriate intervals and keep appropriate records of this.

    The controller must ensure consent can be withdrawn by the data subject as easily as the consent was given and at any time and without detriment. The controller must inform the data subject of the right to withdraw consent prior to actually giving consent and how to exercise this right.

    The GDPR contains specific requirements for processing data of children using online services and also for the purpose of scientific research.

    If you are offering information society services to children, you should check whether parental consent is needed. This is likely to vary from country to country and specific advice should be sought for those advertising internationally.

    Can we help?

    Take a look at our Commercial Law, Data Protection and GDPR page for useful information, resources, guidance, details of our team and how we may be able to help you

  • Key contact:

    • Brachers Employment Solicitor Sarah Wimsett

      Sarah Wimsett

      Solicitor,

    Get in touch

    Please fill out the below form or alternatively you can call us on 01622 690691

      By submitting an enquiry through 'get in touch' your data will only be used to contact you regarding your enquiry. Please view our website and cookie policy for more information
  • Related Articles & Events

    View all
  • Commercial Law, Data Protection and GDPR

    Cyber-crime: are you prepared?

    Insight

    Posted 7th July 2017

  • Commercial Law

    The new Public Contracts Regulations 2015

    Insight

    Posted 25th March 2015

  • Commercial Law

    High streets need to adapt to survive new retail environment

    Insight

    Posted 6th February 2015

  • Commercial Law

    Brachers advises on sale of manufacturer Farmura

    News

    Posted 19th August 2014

  • Brachers with you all the way Logo
    • Statutory Information (including complaints policy)
    • Cookie Policy
    • Refund Policy
    • Privacy Statement
    • Terms of Engagement
    • Website Accessibility
    • Contact Us
    • Sitemap
  • Contact Us

    T: 01622 690691
    F: 01622 681430
    E: hello@brachers.co.uk
    • LinkedIn Icon
    • Facebook Icon
    • Twitter Icon

    Sign up for our newsletter

    Unsubscribe from our newsletter

    SIGN UP
  • Head Office

    Somerfield House
    59 London Road
    Maidstone
    Kent
    ME16 8JH


    T: 01622 690691

  • Medway House

    81 London Road
    Maidstone
    Kent
    ME16 0DU

     

     


    T: 01622 690691

  • Canterbury Office

    First Floor
    Graylaw House
    20-22 Watling Street
    Canterbury
    Kent
    CT1 2UA


    T: 01227 949510