{"id":21157,"date":"2017-12-06T10:08:38","date_gmt":"2017-12-06T10:08:38","guid":{"rendered":"https:\/\/digileaders.com\/?p=21157"},"modified":"2019-01-17T09:43:24","modified_gmt":"2019-01-17T09:43:24","slug":"consent-not-silver-bullet-gdpr-compliance","status":"publish","type":"post","link":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/","title":{"rendered":"Consent is not the \u2018silver bullet\u2019 for GDPR compliance"},"content":{"rendered":"

Before the new law comes into effect on 25 May 2018, I feel bound to sort the fact from the fiction.<\/p>\n

Because there is a lot of misinformation out there and for many who are new to data protection and the GDPR it\u2019s creating uncertainty.\u00a0Organisations that want to get it right<\/a>\u00a0\u2013 and we know that\u2019s the majority \u2013 can sometimes feel like rabbits in the headlights, not knowing which way to leap.<\/span><\/p>\n

In my last post I set the record straight on our\u00a0new fining powers.\u00a0<\/a>My second blog tackles an equally high-profile issue \u2013 consent.<\/p>\n

Myth #2<\/strong><\/h3>\n

You must have consent if you want to process personal data.<\/p>\n

Fact:<\/strong><\/h3>\n

The GDPR is raising the bar to a higher standard for consent.<\/p>\n

Consent under the current data protection law has always required a clear, affirmative action \u2013 the GDPR clarifies that pre-ticked opt-in boxes are not indications of valid consent. The GDPR is also explicit that you\u2019ve got to make it easy for people to exercise their right to withdraw consent.\u00a0 The requirement for clear and and plain language when explaining consent is now strongly emphasised. And you\u2019ve got to make sure the consent you\u2019ve already got meets the standards of the GDPR. If not, you\u2019ll have to refresh it.<\/p>\n

This has understandably created a focus on consent.<\/p>\n

But I\u2019ve heard some alternative facts. How \u201cdata can only be processed if an organisation has explicit consent to do so\u201d.<\/p>\n

The rules around consent only apply if you are relying on consent as your basis to process personal data.<\/p>\n

So let\u2019s be clear. Consent is one way to comply with the GDPR, but it\u2019s not the only way.<\/p>\n

Headlines about consent often lack context or understanding about all the different lawful bases businesses and organisations will have for processing personal information under the GDPR.<\/p>\n

Not only has this created confusion, it\u2019s left no room to discuss the other lawful bases organisations can consider using under the new legislation.<\/p>\n

For processing to be lawful under the GDPR, you need to identify a lawful basis before you start.<\/p>\n

Local authorities processing council tax information, banks sharing data for fraud protection purposes, insurance companies processing claims information.<\/p>\n

Each one of these examples uses a different lawful basis for processing personal information that isn\u2019t consent.<\/p>\n

The new law provides\u00a0five other ways of processing data<\/a>\u00a0that may be more appropriate than consent.<\/p>\n

\u2018Legitimate interests\u2019 is one of them and we recognise that organisations want more information about it. There is already guidance about\u00a0legitimate interests under the current law<\/a>\u00a0on the ICO website and from\u00a0the Article 29 Working Party<\/a>. We\u2019re working to publish guidance on it next year.<\/p>\n

But there\u2019s no need to wait for that guidance. You know your organisation best and should be able to identify your purposes for processing personal information.<\/p>\n

Whatever you decide, you\u2019ll need to document your decisions to be able to demonstrate to the ICO which lawful basis you use. Data protection impact assessments will be able to help you with the task of understanding how you can meet conditions for processing and make your business more accountable under the GDPR.<\/p>\n

But if you are relying on consent, I want to explode another myth that organisations can only start their preparations once the ICO has published guidance.<\/p>\n

Myth #3<\/strong><\/h3>\n

I can\u2019t start planning for new consent rules until the ICO\u2019s formal guidance is published.<\/p>\n

Fact:<\/strong><\/h3>\n

I know many people are waiting for us to publish our final guidance on consent. Businesses want certainty and assurance of harmonised rules. Waiting until Europe-wide consent guidelines have been agreed before we publish our final guidance is key to ensuring consistency. The current timetable is December.<\/p>\n

But the ICO\u2019s\u00a0draft guidance on consent<\/a>\u00a0is a good place to start right now. It\u2019s unlikely that the guidance will change significantly in its final form. So you already have many of the tools you need to prepare.<\/p>\n

Finally, when we do publish our formal guidance on consent, it will not include guidance on legitimate interests or any other lawful bases for processing. It\u2019s guidance on consent and will only cover consent.<\/p>\n

\n

This article was originally published here<\/a> and was reposted with permission.<\/p>\n","protected":false},"excerpt":{"rendered":"

Before the new law comes into effect on 25 May 2018, I feel bound to sort the fact from the fiction. Because there is a lot of misinformation out there and for many who are new to data protection and the GDPR it\u2019s creating uncertainty.\u00a0Organisations […]<\/p>\n","protected":false},"author":11,"featured_media":21183,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"class_list":["post-21157","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","topic-cyber-security"],"acf":[],"yoast_head":"\nConsent is not the \u2018silver bullet\u2019 for GDPR compliance | Digital Leaders<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Consent is not the \u2018silver bullet\u2019 for GDPR compliance | Digital Leaders\" \/>\n<meta property=\"og:description\" content=\"Before the new law comes into effect on 25 May 2018, I feel bound to sort the fact from the fiction. Because there is a lot of misinformation out there and for many who are new to data protection and the GDPR it\u2019s creating uncertainty.\u00a0Organisations […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/\" \/>\n<meta property=\"og:site_name\" content=\"Digital Leaders\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/digitalleadersprogramme\" \/>\n<meta property=\"article:published_time\" content=\"2017-12-06T10:08:38+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-01-17T09:43:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/Elizabeth-Denham2-1920x960.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"960\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"helena.larsen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DigiLeaders\" \/>\n<meta name=\"twitter:site\" content=\"@DigiLeaders\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"helena.larsen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/\"},\"author\":{\"name\":\"helena.larsen\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e\"},\"headline\":\"Consent is not the \u2018silver bullet\u2019 for GDPR compliance\",\"datePublished\":\"2017-12-06T10:08:38+00:00\",\"dateModified\":\"2019-01-17T09:43:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/\"},\"wordCount\":719,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/digileaders.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/Elizabeth-Denham2-1920x960.jpg\",\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/\",\"url\":\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/\",\"name\":\"Consent is not the \u2018silver bullet\u2019 for GDPR compliance | Digital Leaders\",\"isPartOf\":{\"@id\":\"https:\/\/digileaders.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/Elizabeth-Denham2-1920x960.jpg\",\"datePublished\":\"2017-12-06T10:08:38+00:00\",\"dateModified\":\"2019-01-17T09:43:24+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#primaryimage\",\"url\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/Elizabeth-Denham2-1920x960.jpg\",\"contentUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/Elizabeth-Denham2-1920x960.jpg\",\"width\":1920,\"height\":960},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/digileaders.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Consent is not the \u2018silver bullet\u2019 for GDPR compliance\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/digileaders.com\/#website\",\"url\":\"https:\/\/digileaders.com\/\",\"name\":\"Digital Leaders\",\"description\":\"We Lead Transformation\",\"publisher\":{\"@id\":\"https:\/\/digileaders.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/digileaders.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/digileaders.com\/#organization\",\"name\":\"Digital Leaders\",\"url\":\"https:\/\/digileaders.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg\",\"contentUrl\":\"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg\",\"width\":3000,\"height\":2992,\"caption\":\"Digital Leaders\"},\"image\":{\"@id\":\"https:\/\/digileaders.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/digitalleadersprogramme\",\"https:\/\/x.com\/DigiLeaders\",\"https:\/\/www.linkedin.com\/groups\/6527637\/\",\"https:\/\/www.youtube.com\/channel\/UCK1pUziPGg9J8R1S0FhBgiQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e\",\"name\":\"helena.larsen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/digileaders.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g\",\"caption\":\"helena.larsen\"},\"sameAs\":[\"louise.stokes@digileaders.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Consent is not the \u2018silver bullet\u2019 for GDPR compliance | Digital Leaders","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/","og_locale":"en_GB","og_type":"article","og_title":"Consent is not the \u2018silver bullet\u2019 for GDPR compliance | Digital Leaders","og_description":"Before the new law comes into effect on 25 May 2018, I feel bound to sort the fact from the fiction. Because there is a lot of misinformation out there and for many who are new to data protection and the GDPR it\u2019s creating uncertainty.\u00a0Organisations […]","og_url":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/","og_site_name":"Digital Leaders","article_publisher":"https:\/\/www.facebook.com\/digitalleadersprogramme","article_published_time":"2017-12-06T10:08:38+00:00","article_modified_time":"2019-01-17T09:43:24+00:00","og_image":[{"width":1920,"height":960,"url":"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/Elizabeth-Denham2-1920x960.jpg","type":"image\/jpeg"}],"author":"helena.larsen","twitter_card":"summary_large_image","twitter_creator":"@DigiLeaders","twitter_site":"@DigiLeaders","twitter_misc":{"Written by":"helena.larsen","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#article","isPartOf":{"@id":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/"},"author":{"name":"helena.larsen","@id":"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e"},"headline":"Consent is not the \u2018silver bullet\u2019 for GDPR compliance","datePublished":"2017-12-06T10:08:38+00:00","dateModified":"2019-01-17T09:43:24+00:00","mainEntityOfPage":{"@id":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/"},"wordCount":719,"commentCount":0,"publisher":{"@id":"https:\/\/digileaders.com\/#organization"},"image":{"@id":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#primaryimage"},"thumbnailUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/Elizabeth-Denham2-1920x960.jpg","inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/","url":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/","name":"Consent is not the \u2018silver bullet\u2019 for GDPR compliance | Digital Leaders","isPartOf":{"@id":"https:\/\/digileaders.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#primaryimage"},"image":{"@id":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#primaryimage"},"thumbnailUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/Elizabeth-Denham2-1920x960.jpg","datePublished":"2017-12-06T10:08:38+00:00","dateModified":"2019-01-17T09:43:24+00:00","breadcrumb":{"@id":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#primaryimage","url":"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/Elizabeth-Denham2-1920x960.jpg","contentUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2017\/12\/Elizabeth-Denham2-1920x960.jpg","width":1920,"height":960},{"@type":"BreadcrumbList","@id":"https:\/\/digileaders.com\/consent-not-silver-bullet-gdpr-compliance\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/digileaders.com\/"},{"@type":"ListItem","position":2,"name":"Consent is not the \u2018silver bullet\u2019 for GDPR compliance"}]},{"@type":"WebSite","@id":"https:\/\/digileaders.com\/#website","url":"https:\/\/digileaders.com\/","name":"Digital Leaders","description":"We Lead Transformation","publisher":{"@id":"https:\/\/digileaders.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/digileaders.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/digileaders.com\/#organization","name":"Digital Leaders","url":"https:\/\/digileaders.com\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/#\/schema\/logo\/image\/","url":"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg","contentUrl":"https:\/\/digileaders.com\/wp-content\/uploads\/2016\/07\/Digital-Leaders\u00ae-logo.jpg","width":3000,"height":2992,"caption":"Digital Leaders"},"image":{"@id":"https:\/\/digileaders.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/digitalleadersprogramme","https:\/\/x.com\/DigiLeaders","https:\/\/www.linkedin.com\/groups\/6527637\/","https:\/\/www.youtube.com\/channel\/UCK1pUziPGg9J8R1S0FhBgiQ"]},{"@type":"Person","@id":"https:\/\/digileaders.com\/#\/schema\/person\/2da837c2b8c9912d5c8e0c6ba7458c1e","name":"helena.larsen","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/digileaders.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6016ca9d43f5e0371abbcbe533c0e129080e7032b612ef2b2c173d1a732868b4?s=96&d=mm&r=g","caption":"helena.larsen"},"sameAs":["louise.stokes@digileaders.com"]}]}},"_links":{"self":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts\/21157","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/comments?post=21157"}],"version-history":[{"count":0,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/posts\/21157\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/media\/21183"}],"wp:attachment":[{"href":"https:\/\/digileaders.com\/wp-json\/wp\/v2\/media?parent=21157"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}