Consent form: tips and example

The GDPR requires that clear and precise information be offered and that its presentation be adapted according to the context.

What is a consent form?

📌 As part of consent management, and in order to inform people whose data is being processed, the CNIL (National Commission for Information Technology and Civil Liberties) suggests two examples of basic statements to put on a personal data collection form.

In fact, this is not an all-purpose model, but rather a representation that can be adapted or supplemented according to the needs of each organization. 

📋 Example: Include all minimum information on the collection medium 

A computerized file containing the identity and contact details of the data controller must contain all the information collected on this form. 

For further details on risk assessment for the protection of personal data, please consult the website of the CNIL (National Commission for Information Technology and Civil Liberties). CNIL (National Commission for Information Technology and Civil Liberties).

When do I need a consent form?

A consent request form is, as its name suggests, necessary in cases where you need to collect a person's consent to carry out a particular processing operation involving the management of personal data.

👜 When you collect sensitive data, such as medical information, biometric data, political or religious opinions, you must obtain explicit consent from the Data subject.

Sensitive data, according to the CNIL (National Commission for Information Technology and Civil Liberties) , is information likely to reveal a person's presumed racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as the processing of genetic or biometric data with the aim of uniquely identifying a natural person.

In addition, if you intend to process a person's personal data for a specific Purpose , such as using their photos for an advertising campaign, for example, you must obtain their consent for this use.

In addition, any data processing that requires consent from the Data subject may require a consent form.