Further Reading: Explicit consent

Explicit consent must be used when processing:

  • Sensitive personal data
  • When transferring personal data out of the EU/EEA in the absence of adequate safeguards

References:

ICO guidance with links to more detailed guidance
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection- regulation-gdpr/lawful-basis-for-processing/consent/