The most common confusion surrounding the GDPR (General Data Protection Regulation) seems to arise when data controllers attempt to determine how to comply in handling consent. In this second part of the series, I’ll try to clarify the requirements a bit. (See Part 1 here) The overreaching premise of GDPR