TECHCRUNCH: This early GDPR adtech strike puts the spotlight on consent
"Confusing and/or incomplete consent flows aren’t yet extinct, sadly. But it’s fair to say those that don’t offer full opt-in choice are on borrowed time. Because if your service or app relies on obtaining consent to process EU users’ personal data — as many free at the point-of-use, ad-supported apps do — then the GDPR states consent must be freely given, specific, informed and unambiguous. That means you can’t bundle multiple uses for personal data under a single opt-in. Nor can you obfuscate consent behind opaque wording that doesn’t actually specify the thing you’re going to do with the data. You also have to offer users the choice not to consent. So you cannot pre-tick all the consent boxes that you really wish your users would freely choose — because you have to actually let them do that."
Natasha Lomas, Senior Reporter at TechCrunch
Link to article: