UK: ICO published a draft guidance regarding consent under EU GDPR.
This must be:
- freely given (after a genuine choice , without pre-ticked check-boxes)
- granular: consent must be unbundled for each third party
- record-kept: ex art. 7.1 a data controller must hold each of them to have a valid audit-trail
- easy to withdraw