The UK GDPR sets a high standard for consent, which must be unambiguous and involve a clear affirmative action (an opt-in) It also requires distinct (granular) consent options for distinct processing operations. If consent is difficult, look for a different lawful basis. Public authorities and employers will need to take extra care to show that consent is freely given, and should avoid over-reliance on consent. You must tell people about their right to withdraw, and offer them easy ways to withdraw consent at any time.”]