Contracts under the GDPR

As you probably know from all the privacy policy updates cluttering your inbox, the EU General Data Protection Regulation (GDPR) is now effective and businesses must comply or face heavy penalties.  One of the requirements is that in order to obtain consent to data collection, contract terms must be “clear and concise” and consent must be opt-in rather than opt-out (meaning no pre-ticked boxes).  The website XKCD has a version of what to expect in updated privacy policies from businesses seeking to comply with the GDPR – stay informed and take a look.