EU regulatory register · GDPR
Article 7Conditions for consent
CELEX 32016R0679 · Read on 2026-08-18 · Chapter II
Short answer
1. Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data.
Verbatim from the article. Source: NovaCopilot · https://legal.exploreworldai.com/eu/rattsakter/gdpr-2016-679/artikel-7 · Short answer as data · Official text
Official text
Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.
1. Where processing is based on consent, the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data.
2. If the data subject's consent is given in the context of a written declaration which also concerns other matters, the request for consent shall be presented in a manner which is clearly distinguishable from the other matters, in an intelligible and easily accessible form, using clear and plain language. Any part of such a declaration which constitutes an infringement of this Regulation shall not be binding.
3. The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof. It shall be as easy to withdraw as to give consent.
4. When assessing whether consent is freely given, utmost account shall be taken of whether, inter alia, the performance of a contract, including the provision of a service, is conditional on consent to the processing of personal data that is not necessary for the performance of that contract.
Follow-up questions
Other articles in this chapter
Knowledge card
- Applies
- controller: Be able to demonstrate consent where processing is based on consent, present consent requests clearly distinguishable from other matters, and make withdrawal as easy as giving consent.
- Risk if ignored
- critical
- What to do
- Be able to demonstrate consent where processing is based on consent, present consent requests clearly distinguishable from other matters, and make withdrawal as easy as giving consent.
- Deadline
- No fixed deadline in the register
card:eu:article:gdpr--art-7 · sha256 e0469e05ce0a · Source: NovaCopilot
Risk, sanction and outcome
Art. 7 · controller
Risk: high · Sanction: administrative_fine, högst EUR 20 000 000 · Authority: Competent supervisory authority
Decisions applying the provision: none in the register
Full chain (JSON)
Outcomes are counted from stored judgments that cite the provision verbatim. Source: NovaCopilot
Judgments applying this article
9 judgments in the register cite the article in their text. EU 8 · DE 1
- eu:c-129-21-62021cj0129
- eu:c-252-21
- eu:c-184-20
- eu:c-446-21
- eu:c-492-23
- eu:c-60-22
- eu:c-61-19
- eu:c-654-23-62023cj0654
Source: NovaCopilot
Recitals that carry the interpretation
The recitals in the preamble have no legal force of their own but often decide how the article is read. The links are curated against the official text. Read 2026-08-31.
Skäl 42 · Article 7
The burden of proving valid consent rests on the controller.
Guidance and secondary law
Authority guidance and the delegated or implementing acts that fill the article, with the primary source at the issuing body. Read 2026-08-31.
- Guideline · EDPB2020-05-04Guidelines 05/2020 on consent under Regulation 2016/679
When consent is valid: freedom, information duties and withdrawal under Articles 4(11) and 7.
Article 4, 6, 7, 8
The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.
Verifiable trust signals
- Source-linked answers and explicit evidence gaps
- Obligations, controls, risks and consequences
- Stable objects and verifiable checksums
- Rule-based objects, optional source-linked reasoning
- Model card, source status and audit