A signup form bundles consent for necessary contract terms together with unrelated sharing of personal data with marketing partners, making the service conditional on accepting everything. What consent problem does this create?
Select an answer to reveal the explanation.
Short Explanation
If you cannot get the product without also saying yes to partner spam, that yes is not freely given—it is a hostage checkbox. Split the necessary contract stuff from the optional sharing. Consent works when people can choose the extras.
Full Explanation
Consent must be freely given. Bundling consent for necessary contract terms together with unrelated sharing of personal data with marketing partners—and making the service conditional on accepting everything—can undermine freeness. Consent should be granular and separable from non-negotiable contract performance where the GDPR requires that distinction; contractual necessity should cover what the contract truly needs, not hitchhiking partner shares dressed up as “take it or leave it.”
Bundling is not required so controllers obtain one omnibus lawful basis. Unrelated sharing is not always covered by contractual necessity alone. Granular consent is not optional merely because a privacy policy exists somewhere on the site.
Exam caveat: conditionality and bundling are classic “not freely given” fact patterns on CIPP/E items. Operational check: unbundle partner sharing into a separate optional choice, offer real service access without forcing optional processing, and map each purpose to the correct Article 6 basis. Public and commercial sign-up flows serving residents should not force a marketing hitchhike as the price of a basic service the person actually wants; stewards should record why omnibus forced consent was rejected.