Description

This is an internal policy to be used by a business setting out the principles and legal conditions that the business must satisfy when ‘processing’ personal data in the course of its operations and activities based on ‘consent’ as a lawful basis under Article 6(1) (or Article 9(2)(a)). It is tailored to comply with the GDPR.

Consent must be freely given. If a controller relies on consent as the lawful basis for processing, data subjects must be able to choose to have their personal data processed and they must be able to withdraw their consent at any time. The data subject can withdraw the consent on which the processing is based according to Article 6(1) (or Article 9(2)(a)), and where there is no other legal ground for the processing.

Read our GDPR blog post to learn more and download our FREE GDPR Awareness Q&A Fact Sheet.

Get your templates

You can save money by purchasing a full suite of GDPR templates to tailor for your business.

Get your templates

Browse GDPR Templates

We have a suite of pre-order GDPR templates available for you to purchase separately and tailor for your business.

Browse GDPR Templates