A website asks users to agree to its data policy before they sign up.
Define the term consent.
Mark scheme
Award one mark for any of the following up to a maximum of two marks:
- Permission/agreement given by an individual (1)
- For their personal data to be collected/used/processed (1)
- Given freely, without pressure (1)
- The individual is told/understands what their data will be used for (1)
Allow agree, agreement, approve, approval, 'a user says yes', opting in for permission/agreement.
Award the second mark only where the answer also states that permission/agreement is given; 'personal data is collected' on its own is not a definition of consent.
Do not accept 'consent is a legal requirement' (this says why consent is needed, not what it means).
Do not accept 'the user accepts the terms and conditions' on its own (it does not say what is being agreed to, e.g. the use of personal data).
Do not accept 'a company tells the user what data it will collect' on its own (no permission is given).
Do not accept 'consent can be withdrawn at any time' on its own (this is a right of the individual, not a definition of consent).
Example answers and how they were marked
Consent is permission given by a person for their personal data to be collected and used.
Why: Permission given by an individual (1) for their personal data to be collected/used (1).
Consent is giving permission.
Why: Permission/agreement given by an individual (1) but does not say what is agreed to, so the second mark is not earned.
Consent is when a company tells you what data it will collect.
Why: Telling a user what data is collected gives no permission/agreement; the mark scheme's 'Do not accept' line excludes it.