Extract to table

In this Specification, unless the context otherwise requires: (i) references to "Sections" are to sections of this Specification; (ii) references to legislation include that legislation as amended, re-enacted, or replaced from time to time; (iii) references to "including" or "includes" are to be construed without limitation; (iv) headings are for convenience only and shall not affect interpretation; and (v) words in the singular include the plural and vice versa

Consent must meet the requirements of the GDPR

3 Key Legal Principles Informing This Specification The following legal principles, derived from the legislative framework and regulatory guidance described above, underpin every element of this Specification and must be adhered to in all implementation decisions: Consent Must Be Prior to Processing

Consent Must Be Granular

Consent must be purpose-specific and must not be bundled across unrelated processing activities

The end-user must have the ability to accept or reject consent for each defined purpose independently