# Conditions for consent — GDPR — context bundle > Focused context for a single provision, curated from overview.legal on 2026-07-23. Canonical page: https://overview.legal/laws/gdpr/art-7 > Every item cites its source. Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it. ## Provision ### Conditions for consent — Conditions for consent *GDPR, gdpr-art-7-en — https://overview.legal/laws/gdpr/art-7* 1. Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data. 2. If the data subject's consent is given in the context of a written declaration which also concerns other matters, the request for consent shall be presented in a manner which is clearly distinguishable from the other matters, in an intelligible and easily accessible form, using clear and plain language. Any part of such a declaration which constitutes an infringement of this Regulation shall not be binding. 3. The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof. It shall be as easy to withdraw as to give consent. 4. When assessing whether consent is freely given, utmost account shall be taken of whether, inter alia, the performance of a contract, including the provision of a service, is conditional on consent to the processing of personal data that is not necessary for the performance of that contract. ## Enforcement 115 decision(s) on record cite Article 7, totalling approximately €2,058,269,029 in fines (median €30,000). Top fines: - **AZOP (Croatia) - Decision 14-09-2023** (Croatia, €2,000,030,000) — https://overview.legal/posts/122862 - **Vodafone Italia S.p.A.: Non-compliance with general data processing principles** (ITALY, €12,251,601) — https://overview.legal/posts/46553 - **TIM S.p.A.: Insufficient legal basis for data processing** (ITALY, €7,631,175) — https://overview.legal/posts/47986 - **Edison Energia S.p.A.: Non-compliance with general data processing principles** (ITALY, €4,900,000) — https://overview.legal/posts/47786 - **Fastweb S.p.A.: Non-compliance with general data processing principles** (ITALY, €4,500,000) — https://overview.legal/posts/46735 ## Guidance ### Guidelines on processing of personal data through blockchain technologies *EDPB — https://overview.legal/posts/125668* Guidelines 02/2025 on processing of personal data through blockchain technologies Version 2.0 Adopted on 07 July 2026 1 | Adopted Version history Version Date Adoption information version 1.1 08 April 2025 adoption of the guidelines before public consultation version 2.0 07 July 2026 adoption of the guidelines after public consultation 3 | Adopted 4 | Adopted The European Data Protection Board Having regard to Article 70 (1)(e) of the Regulation 2016/679/EU of the European Parliament and of the… ### Opinion 15/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR *EDPB — https://overview.legal/posts/125681* Opinion 15 / 2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal to be used as tool for transfers pursuant to Articles 42 and 46 GDPR Adopted on 15 April 2026 1 | Adopted 2 | Adopted The European Data Protection Board Having regard to Article 63, Article 64(2), Article 42 and Article 46 of the Regulation 2016/679/EU of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to… ### Opinion 14/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR *EDPB — https://overview.legal/posts/125682* Opinion 14 / 2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Adopted on 15 April 2026 1 | Adopted 2 | Adopted The European Data Protection Board Having regard to Article 63, Article 64 (2) and Article 42 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free… ### Report on stakeholder event on processing of personal data to target or deliver political advertisements *EDPB — https://overview.legal/posts/125684* Report on stakeholder event on processing of personal data to target or deliver political advertisements 27 March 2026 1. Background The EDPB organised an online stakeholder event on 27 March 2026 to collect stakeholders’ input on processing of personal data to target or deliver political advertisements. The objective was to engage with stakeholders at an early stage of drafting the EDPB Guidelines on the processing of personal data to target or deliver political advertisements (Chapter III of… ### EDPB-werkprogramma: vier pijlers met plannen voor richtsnoeren over AI, anonimisering en *EDPB — https://overview.legal/posts/53737* Het werkprogramma is opgebouwd rond vier pijlers: Pijler I: richt zich op harmonisatie en compliance: praktische guidance, templates (voor o.a. DPIA's, dataleknotificaties, privacy notices) en specifieke ondersteuning voor het mkb. Pijler II: draait om handhaving en samenwerking tussen toezichtho... ## Related topics - **Consent** — https://overview.legal/topics/toestemming ## Legal Framework --- Generated by overview.legal · https://overview.legal/laws/gdpr/art-7 · 2026-07-23