Consumer consent to the collection and processing of their information has been a cornerstone of data protection practices. The General Data Protection Regulation lists it as one of several ways companies can establish a legal basis to process data. But for consent to be valid, companies must meet some stringent requirements. The Article 29 Working Party has issued guidance on what companies must do when relying on consent.