Consent (data protection)
Consent in data protection is a specific, informed and freely given agreement to the processing of personal data; it can be withdrawn.
When it is needed
When no other legal basis applies, for example using client or patient photos in marketing.
Withdrawal
Once consent is withdrawn and no other basis exists, processing must stop and the data be erased, a common route for removing old client photos.
Frequently asked questions
Is verbal consent valid?
It is hard to prove; get written or recorded consent.