{"page":"/blog/tcf-consent-string-lawful-basis","modified":"2026-11-10","license":"https://creativecommons.org/licenses/by/4.0/","columns":["Provision","What it says","Source"],"rows":[["GDPR Article 4(11)","Consent is a freely given, specific, informed and unambiguous indication of wishes by statement or clear affirmative action.","Source text"],["GDPR Article 7(1)","A controller relying on consent must be able to demonstrate it.","Source text"],["GDPR Article 7(3)","The regulation provides for withdrawal and says it must be as easy to withdraw as to give consent.","Source text"],["ePrivacy Directive Article 5(3)","Storage and access on terminal equipment have separate conditions and exceptions.","Source text"],["IAB Europe, C-604/22, paras. 42–51, 58–77","The Court of Justice addressed when a consent string is personal data and when joint control can attach.","Source text"]],"sourceUrls":[["https://eur-lex.europa.eu/eli/reg/2016/679/oj"],["https://eur-lex.europa.eu/eli/reg/2016/679/oj"],["https://eur-lex.europa.eu/eli/reg/2016/679/oj"],["https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02002L0058-20091219"],["https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:62022CJ0604"]]}