Consent is the key element under the Digital Personal Data Protection Act,2023. The enactment requires that the Consent must be freely given, specific, informed, and unambiguous.
Below are the different types of consents in data protection to be obtained from the Data Principal, explained with examples.
Explicit consent leaves no room for ambiguity and requires a direct statement of consent from the data subject.
A medical research company seeking to use a patient’s medical records for a study would present the individual with a clear, specific consent form outlining the nature of the study, the exact data to be used, and the purpose behind it. The patient must sign and date this form to provide explicit consent.
Implied consent is inferred from the actions or circumstances of the data subject, rather than a direct or written statement of consent.
Opt-in consent requires the individual to take proactive action to give their consent, such as ticking a box.
A newsletter subscription form on a website that includes an unchecked box stating, “Yes, I want to receive monthly updates.” Users must check the box to opt-in.
Opt-out consent places the onus on the individual to remove themselves from a particular service or feature.
A company sends promotional emails that include a line at the bottom saying, “If you wish to stop receiving these emails, click here to unsubscribe.”
Granular consent offers options to consent to one or several types of processing independently.
Upon installing a new app, the user is given options to consent to sharing location data, contacts, and/or photos, each with its own “Yes” or “No” option.
Blanket consent covers multiple activities or types of data processing but should generally be avoided under strict regulations like GDPR.
Consent must be given freely, without coercion or conditions tied to a service that does not require such consent.
An online service should not say, “Agree to share your contact list to use this service,” unless sharing the contact list is essential to the service offered.
By understanding these different types of consents, businesses can more effectively comply with data protection laws, ensuring that the data subjects’ rights are respected in terms of the Digital Personal data Protection Act,2023. However, it is always advised to consult an expert to implement these types of consent adequately.
For any query or feedback, please feel free to get in touch with email@example.com or firstname.lastname@example.org