The GDPR requires consent as a basis for a company to transfer personal data. Prior to the GDPR, EU Directive 94/46/EC only required “opt out” consent, which could be implicit. The GDPR however, requires that the data subject agree to or make “a statement or clear affirmative action” granting such consent for use or transfer of personal data. Read more
A legal blog addressing technology and privacy issues
