“We want to create a space where data protection professionals across the world feel connected through the Journal of Data Protection & Privacy and our specialist interest group on LinkedIn. I also want to reach out and engage with the next generation of leaders in our profession and actively encourage them to share their knowledge and understanding of the subject for the benefit of our expanding – and highly influential – community across the world.”
Consent, its modalities, dynamics and record-keeping
Click the button below to download the full text of the article.
Abstract: The paper provides a general introduction to consent as a legal basis for processing personal data; the definition, modalities and dynamics of consent; the data controller’s obligation to enable the data subject to exercise his or her legal power to grant, to refuse or to terminate any permission granted to the data controller with respect to processing the data subject’s personal data; and the data controller’s obligation to demonstrate consent. The paper demonstrates that, through the concept of legal power, result declarations and temporal characterisations of legal effects, one can model, engineer and design systems with actions that perform, give effect to, enforce and record a data subject’s power and declarations to grant permission, to refuse to grant permission or to terminate any permission previously granted to the data controller with respect to processing the data subject’s personal data.
Keywords: consent, consent management, consent records, GDPR