A mobile app lets users consent to personalised ads with one tap at signup, but burying consent withdrawal five menus deep. What GDPR consent rule does this practice violate?
Select an answer to reveal the explanation.
Short Explanation
If saying yes is one tap, saying no should not be a scavenger hunt. Consent is only healthy when walking away is just as simple as signing up. Burying withdrawal five menus deep breaks that deal.
Full Explanation
Under the GDPR, consent must be freely given, specific, informed and unambiguous, and it must be as easy to withdraw as to give. Designing a one-tap grant path while hiding withdrawal behind deep navigation undermines freeness and fails the equal-ease requirement for valid ongoing consent.