Section 68 amends Article 4 of the UK GDPR by clarifying how the lawful basis of consent may be used in scientific research when the controller is unable to identify fully the purposes of a study at its start. It does this by stating when consent in such cases meets the existing definition under the UK GDPR. To rely on consent in these cases, controllers must satisfy the conditions in new Article 4(6)(a)-(d).
Part 5: Data Protection and Privacy Definitions in the UK GDPR and the 2018 Act Section 68: Consent to processing for the purposes of scientific research