The ICO's draft guidance on how consent will be understood under the GDPR says that going forward, there must be a positive opt-in. Consent should be separate from other terms and conditions, and it should not generally be a pre-condition of signing up to a service. The GDPR specifically bans pre-ticked opt-in boxes. The GDPR's requirement of explicit consent requires a very clear and specific statement of consent. The ICO therefore advises the naming of any third parties who will rely on the consent. Individuals will need to be offered an opportunity to easily withdraw consent. Organisations should also keep evidence of consent - how it has been obtained, when, etc. The draft guidance is op
FOI News GNFIA Almost half of all requests for information under the South African access to information law are refused, according to a new report by the Access to Information Network. This and other findings point out “a shocking dereliction of duties by public and private bodies to realise South Africans’ constitutional right of access to information,” according to the 13 civil society organizations which make up the ATI Network. The Shadow Report 2016 was compiled with statistics from requests for information made using the Promotion of Access to Information Act, 2000 (PAIA). The report covers the period August 1, 2015, to July 31, 2016, during which ATI Network members submitted 369 P