Privacy Guidelines on Consent under Regulation 2016/679 (GDPR)
Guidelines 05/2020 on Consent under Regulation 2016/679 (GDPR)
Section 3.2 Specific
55. Article 6(1)(a) confirms that the consent of the data subject must be given in relation to “one or more specific” purposes and that a data subject has a choice in relation to each of them. The requirement that consent must be ‘specific’ aims to ensure a degree of user control and transparency for the data subject. This requirement has not been changed by the GDPR and remains closely linked to the requirement of ‘informed’ consent. At the sametime, it must be interpreted in line with the requirement for ‘granularity’ to obtain ‘free’ consent. In sum, to comply with the element of ‘specific’ the controller must apply:
i Purpose specification as a safeguard against function creep,
ii Granularity in consent requests, and
iii Clear separation of information related to obtaining consent for data processing activities from information about other matters.