QuestionQ35

Compliance/security basics

Which two requirements does the GDPR impose when requesting marketing consent from customers?

Choose two
  • A Opt-in boxes must be pre-ticked.
  • B Records must be kept to show the details of the consent given.
  • C Marketing consent must be separate from terms & conditions acceptance.
  • D Multiple marketing consents must be done with a single opt-in.
Explanation

Controllers must be able to demonstrate consent by retaining evidence of its details. Consent requests must also be clearly distinguishable from other matters, including terms and conditions. Valid consent requires an affirmative opt-in, so pre-ticked boxes are not valid; distinct purposes generally require granular consent choices.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!