Data protection
Definition of 'consent' confirmed by European Commission's Article 29 Working Party
The Article 29 Working Party has produced an * opinion paper * on the definition of 'consent' as referred to in the European Data Protection Directive and e-Privacy Directive.
The opinion confirms amongst other things that consent should be freely given, specific, and informed, giving the individual enough detail to make a decision about how their personal data will be used.
Where explicit consent is required to process sensitive personal data, such as health records, the opinion paper explains that an individual must actively agree - either orally or in writing - to their personal data being processed. Consent based on an individual's inaction is not sufficient. Individuals should also be able to withdraw their consent, therein preventing any further processing of their personal data.
The opinion paper is consistent with the guidance the ICO has provided on 'consent' in its Guide to Data Protection, which organisations across the UK should continue to follow.
*Link
Definition of 'consent' confirmed by European Commission's Article 29 Working Party
The Article 29 Working Party has produced an * opinion paper * on the definition of 'consent' as referred to in the European Data Protection Directive and e-Privacy Directive.
The opinion confirms amongst other things that consent should be freely given, specific, and informed, giving the individual enough detail to make a decision about how their personal data will be used.
Where explicit consent is required to process sensitive personal data, such as health records, the opinion paper explains that an individual must actively agree - either orally or in writing - to their personal data being processed. Consent based on an individual's inaction is not sufficient. Individuals should also be able to withdraw their consent, therein preventing any further processing of their personal data.
The opinion paper is consistent with the guidance the ICO has provided on 'consent' in its Guide to Data Protection, which organisations across the UK should continue to follow.
*Link
Comment