Under GDPR, you might need to obtain consent to process a customers personal data or change how you currently obtain that consent. In particular, GDPR says that consent must be "freely given, specific, informed and unambiguous." For example, if you are using online advertising or retargeting apps, then you might need a heightened form of consent. Consider the following questions:
- Do you need to get a more specific consent from customers because of the personal information that you or a third-party app processes?
- Do you need to change your processes to get affirmative, opt-in consent for processing personal data?