Skip to main content

What is Consent?

Consent in data privacy is the explicit permission given by an individual for their personal information to be collected, used, or shared, based on full awareness of how it will be used.

Consent under the General Data Protection Regulation (GDPR) refers to any freely given, specific, informed, and unambiguous indication of an individual's wishes by which they, through a statement or a clear affirmative action, signify agreement to the processing of personal data relating to them. Under the California Consumer Privacy Act (CCPA), consent is not explicitly defined in the same manner as GDPR; however, the act requires businesses to provide consumers with notice and the ability to opt-out of the sale of their personal information, implying a need for affirmative authorization for certain data activities.