is gdpr opt in or opt out?
In other words, individuals need a mechanism that requires a deliberate action to opt in, as opposed to pre-ticked boxes. Although the GDPR doesn't specifically ban opt-out consent, the ICO (Information Commissioner's Office) says that opt-out options “are essentially the same as pre-ticked boxes, which are banned”.