samþykktarstýring

Samþykktarstýring, a term originating from Icelandic, translates to "approval control" or "consent management" in English. It refers to the systematic process of obtaining, documenting, and managing consent from individuals for various purposes, particularly in relation to their personal data. This concept is crucial in contexts governed by data protection regulations such as the General Data Protection Regulation (GDPR).

The core principle of samþykktarstýring is ensuring that individuals have a clear and informed choice about how their information is used. This involves providing transparent information about what data is being collected, why it is being collected, how it will be used, and who it will be shared with. Consent must be freely given, specific, informed, and unambiguous, often requiring an affirmative action from the individual, such as ticking a box or clicking a button.

Effective samþykktarstýring systems allow organizations to track the consent received, including the date, time, and specific purpose for which consent was granted. It also necessitates mechanisms for individuals to withdraw their consent easily, at any time, and with the same level of ease as giving it. This management aspect is vital for demonstrating compliance with legal obligations and for building trust with individuals whose data is being processed. Organizations must be able to prove that they have obtained valid consent and can honor withdrawals.