The Data Protection (Civil Registration) Regulations

6. Consent.

Edition: 2022-12-31 · In force

(1)A civil registration entity shall seek consent from a data subject for processing of personal data at the time the personal data is collected.

(2)A civil registration entity shall, before processing personal data, inform the data subject.

(a)the type of personal data to be processed;

(b)the magnitude of personal data to be processed;

(c)the reasons for the processing the required personal data; and

(d)whether the personal data processed shall be shared with third parties.

(3)A civil registration entity shall obtain consent from the data subject while ensuring that—

(a)the data subject is informed in a language they understand;

(b)the data subject voluntarily gives consent;

(c)consent is specific; and

(d)the data subject has capacity to understand and communicate their consent.

(4)A civil registration entity shall obtain the consent in physical or electronic form.