Laws · GDPR ·art-4-par-11 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
How it connects
Cited by
- Guidelines 05/2020 on consent under Regulation 2016/679
- Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them
- Guidelines 2/2018 on derogations of Article 49 under Regulation 2016/679
- Guidelines 02/2021 on virtual voice assistants
- Guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications
All 54
- Guidelines 06/2020 on the interplay of the Second Payment Services Directive and the GDPR
- Website providing legal information: Insufficient fulfilment of information obligations
- HvJ EU 9 januari 2025, C‑394/23 (Mousse).
- EDPB Annual Report 2024
- Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation
- Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom
- Opinion 2/2026 on the Proposal for a Directive amending Directives (EU) 2016/2341 and 2016/97 as regards the strengthening of the framework for occupational retirement provision
- Bundesverband der Verbraucherzentralen v Planet49 GmbH
- GC and Others v CNIL
- Meta Platforms v noyb
- ICO (UK) - KRA Consultancy Ltd
- EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework (
- If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation
- Can the GPC standard eliminate consent banners in the EU?
- Pay or Consent Models in Europe: Already Outdated or an Overlooked Crisis in Freely Given Consent?
- AKI (Estonia) - No. 2.1-1/24/397-890-38
- CJEU - C-61/19 - Orange Romania
- APD/GBA (Belgium) - 11/2022
- Belgian DPA: Roularta Media Group violated cookie consent rules
- APD/GBA (Belgium) - 159/2023
- APD/GBA (Belgium) - 131/2024
- BVwG - W 108 2284491-1
- BGH: Preselected checkbox for web analytics cookies does not constitute valid consent
- CNIL (France) - SAN-2022-026
- Belgian DPA finds MediaHuis violated GDPR fairness over cookie banner design
- Norwegian DPA: Legelisten.no may process healthcare reviews without prior consent
- CNIL (France) - SAN-2021-023
- Austrian FAC: DPA rightly found loyalty program consent for profiling invalid under GDPR
- Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms
- Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria
- Response of the EDPB to the European Commission's targeted consultation on a digital euro
- Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of personal data
- EDPB-EDPS Joint Opinion 03/2021 on the Proposal for a regulation of the European Parliament and of the Council on European data governance (Data Governance Act)
- EDPB Document on response to the request from the European Commission for clarifications on the consistent application of the GDPR, focusing on health research
- Guidelines 04/2020 on the use of location data and contact tracing tools in the context of the COVID-19 outbreak
- Guidelines 03/2020 on the processing of data concerning health for the purpose of scientific research in the context of the COVID-19 outbreak
- X v Russmedia Digital SRL and Inform Media Press SRL
- Koninklijke Nederlandse Lawn Tennisbond v Autoriteit Persoonsgegevens
- Agentsia po vpisvaniyata v OL
- Proximus NV v Gegevensbeschermingsautoriteit
- StWL Städtische Werke Lauf a.d. Pegnitz GmbH v eprimo GmbH
- Data Protection Regulation and International Arbitration: Can There Be Harmonious Coexistence (with the GDPR Requirements Concerning Cross-Border Data Transfer)?
- Understanding the GDPR from a requirements engineering perspective—a systematic mapping study on regulatory data protection requirements
- DSB (Austria) - 2025-1.049.138
- AEPD fines MÁS SOL ENERGÍA for marketing call to Robinson List subscriber
- VG Berlin - 42 K 73/25
- Finnish Supreme Administrative Court: cookie banner with harder "Reject All" violates
- BVwG - W292 2298015-1
- CJEU - C-317/25