Practice vocabulary for GDPR consent management: granular consent, consent recording, withdrawal, lawful basis, and consent management platforms (CMP).
0 / 5 completed
1 / 5
'The consent is _____ — users can accept marketing but decline analytics.' What word describes this?
'Granular consent' means users can make separate choices for each purpose (marketing, analytics, functional) rather than all-or-nothing.
2 / 5
What must be recorded alongside user consent for GDPR compliance?
GDPR requires recording consent with a timestamp and the version of the consent form shown, creating an auditable consent record.
3 / 5
'Withdrawal of consent triggers _____.' What is the correct follow-up action?
Under GDPR, when a user withdraws consent, the data collected under that consent must be deleted (unless another lawful basis applies).
4 / 5
What does CMP stand for in privacy engineering?
CMP stands for Consent Management Platform — software like OneTrust or Cookiebot that manages user consent for cookies and tracking.
5 / 5
Which of these is NOT a GDPR lawful basis for processing personal data?
'Business necessity' is not a recognized GDPR lawful basis. The six bases are: consent, contract, legal obligation, vital interests, public task, and legitimate interest.