Consent in data protection

In Swiss data protection law, consent is one possible basis or justification for processing, but not always required. Where relied on, it must be informed, specific and freely given; for sensitive data or high-risk personality profiles, an express form may be required. Consent should not be bundled with unrelated terms or obtained through pressure. It can usually be withdrawn for the future, though earlier lawful processing may remain valid. Controllers should record what was explained and how consent was obtained.