Consent under GDPR: When to act and what to do (EDPB summary of Guidelines 05/2020)

What it covers

This document is a short quick-reference summary of the EDPB Guidelines on consent, presenting the four cumulative validity criteria, explicit consent, withdrawal of consent and rules for children's consent through a checklist and short practical examples; the full guidelines carry the detailed legal analysis.

Why it matters

It offers a fast checklist for confirming whether a consent mechanism is likely to be valid, useful as an entry point before consulting the full guidelines for detailed reasoning.

Refer to it when

• quickly checking the basic validity criteria for consent
• training non-specialist staff on consent basics
• spotting obvious invalid consent designs such as cookie walls

Questions this document addresses

• What are the four elements a valid consent must meet?
• When is explicit consent required?
• How easy must it be to withdraw consent?
• What age rules apply to children's consent for information society services?

Topics

• Consent
• Lawful basis
• Children's data