Laws · GDPR ·art-7-par-1 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data.
How it connects
Cited by
- Guidelines 05/2020 on consent under Regulation 2016/679
- Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them
- Guidelines 3/2019 on processing of personal data through video devices
- Ski rental company: Non-compliance with general data processing principles
- OneDirect Srl: Insufficient legal basis for data processing
All 42
- Iren Mercato S.p.A.: Insufficient legal basis for data processing
- Operator of a ballet school: Insufficient legal basis for data processing
- Roularta Media Group: Insufficient legal basis for data processing
- SA Rossel & Cie: Insufficient legal basis for data processing
- CRITEO: Insufficient fulfilment of data subjects rights
- GROUPE CANAL +: Insufficient fulfilment of data subjects rights
- Università Telematica E-Campus: Non-compliance with general data processing principles
- Legal Person: Insufficient legal basis for data processing
- Study on the secondary use of personal data in the context of scientific research
- Joint Guidelines on the Interplay between the Digital Markets Act and the General Data Protection Regulation
- CJEU - C-61/19 - Orange Romania
- Belgian DPA: Roularta Media Group violated cookie consent rules
- Belgian DPA finds MediaHuis violated GDPR fairness over cookie banner design
- APDCAT advises Catalan draft law transposing EU 2019/1153 lacks data minimization and
- CJEU: Dynamic IP addresses are personal data when identity can be determined
- Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms
- Statement 1/2024 on legislative developments regarding the Proposal for a Regulation laying down rules to prevent and combat child sexual abuse
- EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse
- EDPB-EDPS Joint Opinion 2/2022 on the Proposal of the European Parliament and of the Council on harmonised rules on fair access to and use of data (Data Act)
- Statement 05/2021 on the Data Governance Act in light of the legislative developments
- X v Russmedia Digital SRL and Inform Media Press SRL
- Agentsia po vpisvaniyata v OL
- RL v Landeshauptstadt Wiesbaden
- Ligue des droits humains ASBL v Conseil des ministres
- TK v Asociaţia de Proprietari bloc M5A-ScaraA
- Safe Interenvios, SA v Liberbank, SA and Others
- Judgment of the Court (Grand Chamber), 16 October 2012.#European Commission v Republic of Austria.#Failure of a Member State to fulfil obligations – Directive 95/46/EC – Processing of personal data and free movement of such data – Protection of natural persons – Article 28(1) – National supervisory authority – Independence – Supervisory authority and the Federal Chancellery – Personal and organisational links.#Case C‑614/10.
- Heinz Huber v Bundesrepublik Deutschland
- Tietosuojavaltuutettu v Satakunnan Markkinapörssi Oy and Satamedia Oy
- UODO (Poland) - DKN.5131.5.2025
- UODO fines controller for refusing to cooperate and provide information in two data
- UODO reprimands mayor for disclosing data subject's data to company without legal basis
- Finnish DPA examines anti-doping organization's GDPR compliance over public suspension
- European Commission v Hungary
- CJEU - C-317/25
- TIM S.p.A.: Non-compliance with general data processing principles
- UODO fines controller PLN 31,507 for failing to provide information under Art. 58(1) GDPR