Consent is a common legal basis that companies rely on for processing personal data, but it must be valid. That requires the request for consent to be separate from other information (not hidden in the fine print), phrased in clear and plain language suited to the person giving it, and just as easy to withdraw later as it was to give.