Managing Personal Data in a Digital Environment - Did GDPR's Concept of Informed Consent Really Give Us Control?

As GDPR shifted the legislative focus toward a more human rights-based approach to privacy, consent became an even more important legal basis for handling personal data. In this paper I examine some of the shortcomings of the ‘informed consent' principle of GDPR. Some of these shortcomings stem from the large amount of information privacy notices contain, while being written in a difficult legal language. Other issues rise from inherent psychological biases that make us disregard long-term adverse effects for short-term benefits. Finally I agree that simplification and standardisation together with education and raising awareness can help overcoming these issues