Hacker News new | ask | show | jobs
by zucan 2753 days ago
>With the GDPR in place, you theoretically now need to get consent every time

This is false. There are multiple ways to justify processing of personal data, and your example would fall under data processing necessary to perform a contract at the customer's request. Depending on your location, there might also be legal requirements to record and keep user data, which is also a valid reason that doesn't require consent of the user.

https://gdpr-info.eu/art-6-gdpr/