What voids or invalidates consent?

Pre-checked opt-in boxes void consent under GDPR-the subscriber must take affirmative action, not merely fail to uncheck. Bundled consent (\"by signing up for this service you agree to receive marketing\") invalidates if the user couldn't access the service without accepting marketing. Consent must be separable from other terms when practical.

Lack of clarity invalidates consent: if users didn't understand what they were agreeing to-either through confusing language, hidden terms, or technical dark patterns. The uconsent isn't informed. Similarly, consent obtained through deceptive practices (misleading descriptions of what emails will contain) is void because it wasn't based on accurate information.

Scope changes can void consent. If you obtained consent for \"weekly product updates\" and start sending daily promotional blasts, you've exceeded the scope of original consent. Major changes in email frequency, content type, or sender identity require obtaining new consent. Valid consent is a specific, informed agreement-anything that undermines specificity, information, or voluntary choice renders it invalid, regardless of what box was technically checked.