A signup form uses pre-ticked boxes to collect consent for optional analytics cookies and partner offers. What is wrong with this approach under GDPR consent rules?
Select an answer to reveal the explanation.
Short Explanation
Pre-ticked boxes are the old 'we assume you said yes' trick—and GDPR isn't buying it. Consent needs a clear opt-in you actually choose, and saying 'never mind' later should be just as easy. Untick-by-default isn't real consent.
Full Explanation
GDPR consent requires a freely given, specific, informed, and unambiguous indication by a statement or clear affirmative action. Pre-ticked boxes and similar defaults typically do not meet that standard. Controllers must also make withdrawal as easy as giving consent and keep purposes specific rather than burying them in lengthy policies alone.