In the last post I mentioned that within any registration forms you should separate the request for consent related to processing of data from the request for consent relating to direct marketing. Here’s why…   Basically the regulation states that the data subject has every right to withdraw their consent at any point in time…