Short Reads

Countdown 5 weeks until GDPR : How should valid consent be proven?

Stibbe - How should valid consent be proven?

Countdown 5 weeks until GDPR : How should valid consent be proven?

19.04.2018 EU law

Only 5 more weeks to go before the GDPR becomes fully effective. Preparing your company for the application of this new regulation requires a correct understanding of its principles. Each week, we highlight one particular misconception regarding the interpretation of the GDPR.

How should valid consent be proven?

Article 7 of the GDPR reads: “the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data”. However, the GDPR does not contain specific, compulsory provisions in relation to the conditions for proving how the consent was given or obtained.

In that respect, the GDPR is inconsistent with the provisions of certain previous national legislations implementing Directive 95/46/EC (such as, e.g., the Italian Legislative Decree no. 196 of June 30, 2003, whereby the data subject’s consent could be deemed to be effective only if it is “documented in writing”).  

As a consequence, data controllers have the right to demonstrate how the valid consent was obtained by using any means allowed under their legal systems. In that respect, the use of any means for keeping a record of the data subjects’ consent - such as, for example, written statements, also statements stored by electronic means, or tick boxes to be set on internet websites specifically addressing the consent to be sought for the envisaged data processing activities - could be recommended.

Stibbe, together with Chiomenti, Cuatrecasas, GIDE and Gleiss Lutz, have gathered this useful information, reflecting some common misconceptions about the implementation of the GDPR.

Team

Related news

14.10.2019 NL law
Kamerdebat over digitalisering van de overheid: aandacht voor bescherming burger vereist

Short Reads - Op 24 september 2019 zijn er vier moties in stemming gebracht én aangenomen door de Tweede Kamer. De moties hebben als gemeenschappelijke deler dat ze in het teken staan van de steeds groter wordende digitalisering bij de overheid. Het achterliggende doel van de moties is dat de burger voldoende beschermd moet worden tegen deze digitalisering.

Read more

02.10.2019 EU law
Seminar: Data protection implications of (a no-deal) Brexit

Seminar - On October 25th at 9.30 am, we organize a seminar where we will discus the implications of a (no-deal) Brexit on data protection.  These issues affect all businesses interacting between UK and EEA (including EU) and which send or receive data to and from UK. We will highlight the main challenges both in the case of a hard Brexit on 31 October 2019 and in other scenarios. We will also offer guidelines to help your organisation mitigate the respective risks.

Read more

27.09.2019 NL law
Stibbe is attending the IBA's annual conference in Seoul

Conference - The annual conference of the International Bar Association (IBA) is currently taking place in Seoul. There are fourteen partners from Stibbe attending the event. Several of them have speaking slots on a wide range of legal topics and will take part in various panel discussions.

Read more

Our website uses functional cookies for the functioning of the website and analytic cookies that enable us to generate aggregated visitor data. We also use other cookies, such as third party tracking cookies - please indicate whether you agree to the use of these other cookies:

Privacy – en cookieverklaring