UK GDPR compliance with ConsentX

The UK GDPR is the UK's data protection framework governing the processing of personal data. It establishes requirements around lawful processing, transparency, consent, data security, accountability and individual data protection rights.

For non-essential cookies and similar tracking technologies, consent is generally required before they are placed or used. Consent should be freely given, specific, informed and unambiguous.

No. Where consent is required, users should be given a genuine choice. Rejecting non-essential cookies should be as easy and clear as accepting them, and non-essential categories should not be pre-selected.

ConsentX stores tamper-evident consent records containing relevant information about the consent decision, helping organisations maintain an auditable evidence trail.

Yes. UK GDPR can apply to organisations outside the UK when they offer goods or services to individuals in the UK or monitor their behaviour.