ImplementingRegulationPersonalDataProtectionLaw

1- The Controller shall obtain Data Subject's consent to Process their Data in any appropriate form or means, including written or verbal consent or electronic means, subject to the following conditions: a) Consent shall be given freely and not obtained through misleading methods, and obtaining consent shall comply with the provisions of Article (7) of the Law. b) Processing purposes shall be clear, specific, and shall be explained and clarified to the Data Subject before or at the time of requesting consent. c) Consent shall be given by a person who has full legal capacity. d) Consent shall be documented through means allowing future verification, such as keeping registers recording Data Subjects’ consent for Processing operations, specifying time and the mean of Consent. Public e) A separate consent shall be obtained for each Processing purpose. 2- Data Subject's consent shall be explicit in the following cases: a) When the Processing involves Sensitive Data. b) When the Processing involves Credit Data. c) When decisions are made solely based on automated Processing of Personal Data.