Replying to @MatthewPCooke and @mmatthiesen, @IABEurope
Ah! I see where you’re coming from, but it’s the other way around. The default state of personal data is that you’re not supposed to process it unless you have a legal basis.
One of these bases is consent, but it has to be valid.
The issue is not that the framework…