Individual’s data can only be accessed on the basis of consent. The further use and sharing of data can also only be done with explicit and informed consent, based on clearly stated purposes of how, why, where and how long personal data will be used and stored. The consent must have the option of being equally easy to revoke as it was to give, without any coercion to give it in the first place.**
