Schedule 5Data Protection Law, 2017
CONDITIONS OF CONSENT
1The data controller shall bear the burden of proving the data subject’s consent to the processing of the data subject’s personal data for the specified purposes.
2If the data subject’s consent is to be given in the form of a written declaration which also concerns another matter, the requirement to give consent shall be presented in an appearance that is distinguishable from the other matter.
3The data subject shall have the right to withdraw consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
4Where there is a significant imbalance between the position of the data subject and the data controller, consent shall not provide a legal basis for the processing.