Hacker News new | ask | show | jobs
by AlexanderHanff 1 day ago
You might well think it is reasonable, but the law doesn't permit this, it is explicit that the person has an absolute right not to be subjected to direct marketing activities (Article 21 of the GDPR) and Article 5 of the GDPR requires that any processing of personal data must comply with all other relevant laws in order to be lawful under the GDPR - ePrivacy Directive (Article 13) governs Direct Marketing in the EU and requires consent - but that consent must meet the requirements of Article 7 under the GDPR in order to be valid (freely given) and any consent which is bundled and is a condition of access to a service where such processing is not necessary to provide that service - is not considered as freely given.

This is not new, we have a lot of case law and regulatory guidance on this.