Skip to content
    Flow-alerta.cab

    Consent

    Application & enablementData protection consentOpt-in
    Editorially reviewed on: 1 source
    Your reading view

    The short answer · 18 words

    In short

    Voluntary, specific and informed expression of the will of a person to process his or her personal data.

    Flow-alerta.cab (2026): Consent. https://flow-alerta.cab/en/glossar/consent. Editorially reviewed on: 10 October 2026.

    How much detail would you like?

    Practical

    Relevant if processing is based on consent; it is not a blanket obligation for any analysis or AI application.

    Hypothetical example: A website operator asks for active, documentable consent before using marketing technology that requires consent.

    Implementation of consent management platforms (CMPs) on websites and clean permission marketing in sales.

    At a glance

    Core
    GDPR consent must be voluntary, specific, informed and unambiguous. Those responsible must be able to prove it. A revocation must be at any time and as simple as the granting possible. Consent is one of several possible legal bases.
    Use
    Relevant if processing is based on consent; it is not a blanket obligation for any analysis or AI application.
    Example
    Hypothetical example: A website operator asks for active, documentable consent before using marketing technology that requires consent.
    Limits
    Pre-selected check marks, unclear purposes, pressure or disadvantages in the event of refusal; require processing unnecessary for the service as a prerequisite; make revocation more difficult.

    In context

    General Data Protection Regulation (GDPR)

    European Regulation on the standardisation of the protection of personal data of natural persons.

    Consent

    Voluntary, specific and informed expression of the will of a person to process his or her personal data.

    Questions about this term

    Is Silence Consent?

    No, consent requires an active action (opt-in).

    Can a consent be revoked?

    Yes, at any time and as simply as it was granted.

    All details and background

    GDPR consent must be voluntary, specific, informed and unambiguous. Those responsible must be able to prove it. A revocation must be at any time and as simple as the granting possible. Consent is one of several possible legal bases.

    ELI5 – Explained simply

    A conscious yes to a clearly described purpose. Depending on the processing, a different legal basis may apply.

    Why it matters in practice

    Relevant if processing is based on consent; it is not a blanket obligation for any analysis or AI application.

    Example

    Hypothetical example: A website operator asks for active, documentable consent before using marketing technology that requires consent.

    Pitfalls and limits

    • Pre-selected check marks, unclear purposes, pressure or disadvantages in the event of refusal; require processing unnecessary for the service as a prerequisite; make revocation more difficult.

    Origin & history

    The GDPR and the EDPB guidelines specify requirements for data protection consent.

    Use in mid-sized companies

    • Implementation of consent management platforms (CMPs) on websites and clean permission marketing in sales.

    Related terms

    • GDPR
    • Consent Management Platform (CMP)
    • Cookie Banners
    • Opt-in
    • Dark Patterns

    Matching Flow-alerta service

    AI opportunity analysis & roadmapAI consulting: Examine the suitability, data and prerequisites of a possible use case on the subject of “consent”.

    Matching tool / use case

    View use casesUse Case: Examine the purpose, proof and revocation of a consent process

    Sources

    Quellenprüfung: 10.10.2026. Definition und dokumentierte Einordnung abgeglichen; Beispiele beschreiben mögliche Anwendungen.

    Editorially reviewed on:

    Next step

    Put knowledge into practice

    Discuss your projectView use cases