Consent
Consent as a lawful basis for processing requires a freely given, specific, informed, and unambiguous indication of the data subject's agreement, either by a statement or by a clear affirmative action. Pre-ticked boxes or implied consent do not meet this standard. Data subjects must be able to withdraw consent as easily as they gave it, and withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
DPA reference
Data Protection Act 2020
Related terms in Key concepts
Anonymisation
Altering personal data so that individuals can no longer be identified, directly or indirectly.
Automated decision-making
Making decisions solely by automated means, without human involvement, that significantly affect individuals.
Beneficial ownership
The natural person who ultimately owns or controls a legal entity.
Biometric data
Unique physical or behavioural characteristics used to identify an individual, such as fingerprints.