Notice and consent

What must the individual be told, and when is active consent required?

EU

Dataskyddsförordningen

art. 6, 13 och 14

Processing requires a legal basis, and the notice is given when the data is collected. Consent is one basis among several, not the default.

California Consumer Privacy Act, som ändrad genom CPRA

Cal. Civ. Code § 1798.100(a)

Notice is given at collection, and the reader must be able to opt out of sale and sharing. Consent is required for minors.

Personal Information Protection Law

art. 14, 17 och 39

Consent is the rule, and separate consent is required for outbound transfers, sensitive data and sharing with third parties.

Deadline: Ongoing, for as long as the processing continues
Penalty: Up to CNY 50 million or five percent of the previous year's turnover
Supervision: Cyberspace Administration of China
Read: 2026-08-22

This page restates written law with the provision and the official source. It is not legal advice in an individual matter.

Next step

Three ways to put the register to work in your own practice.

Litigation
Find support in a judgment
Search guiding decisions, see what became final and follow changes in the law.
In-house, deals
Map the rules in a transaction
Move from theme to act and on to the article that carries the duty.
Compliance
Assess the risk in a process
Risk scoring per legal area, with the sources behind every score.