How does LGPD define consent?
LGPD defines consent as a free, informed, and unambiguous indication of the data subject's agreement to processing of their personal data for a specific purpose. This mirrors GDPR's approach: consent must be positive action, not passive acceptance or pre-selected options.
Free means given without coercion or conditionality. You ucannot require consent as a condition of service when consent isn't necessary for that service. Informed means the individual understood what they were agreeing to-clear explanation of who will process data, what data, for what purpose. Unambiguous requires clear affirmative action-checking a box, clicking a button, not merely failing to opt out.
Consent must be specific to each processing purpose; blanket consent covering all possible uses is invalid. Individuals must be able to withdraw consent as easily as they gave it. Organizations must document and maintain proof of consent obtained. For sensitive personal data (health, religious beliefs, genetic data), LGPD requires explicit, highlighted consent. LGPD consent standards effectively require the same rigorous opt-in processes that GDPR demands-global consistency in consent practices satisfies both.
Was this answer helpful?
Thanks for your feedback!