Fundamentals

Individual Consent: When Is a Yes Truly Valid?

By Daniel Sardá · Published on September 23, 2026

7 min read1,385 words

Consent is not a mere formality: it is a free, attributable decision about a specific action. Its validity depends on context.

One person signs a document because they fear losing their job. Another clicks “accept” without knowing that they are authorizing several distinct uses of their data. A third hears an explanation of a medical treatment, asks questions, and decides to proceed. All three situations involve some form of assent, but not necessarily the same degree of valid consent.

Individual consent is not simply saying “yes,” ticking a box, or signing a form. It is a personal decision with a defined content and scope. To determine whether that decision can genuinely be attributed to the person making it, their freedom, understanding, capacity, and the information available all matter. So does what, exactly, they agreed to.

Key idea: An outward form—a word, a click, or a signature—may show that someone made a statement, but it does not by itself establish that the decision was free, understood, and valid.

What individual consent means

In general terms, individual consent is the expression of will through which a person accepts an action or obligation within their own sphere of decision-making. The Pan-Hispanic Dictionary of Legal Spanish describes it as an express or implied manifestation of will capable of producing legal effects.

That definition has two central elements. First, there must be a will attributable to a person, rather than a convenient assumption made by others. Second, that will concerns something specific: an intervention, an exchange, a use of information, or an obligation.

Consent therefore connects to individual autonomy. It recognizes that each person has a sphere of decision-making that others should not invade merely for convenience. From a liberal perspective, legitimate exchanges rest on voluntary decisions rather than imposition.

But autonomy does not make every choice valid or erase its consequences. People cannot necessarily authorize every imaginable course of conduct, disregard the rights of others, or undo all effects of an earlier decision by will alone. Applicable law sets limits that vary by country and field.

Questions for assessing validity

No single checklist applies in every setting. A contract, a medical intervention, and the processing of personal data are governed by different rules. Even so, some common questions help assess whether consent reflects an authentic decision:

• Could the person decide freely? A threat, improper pressure, or deception can empty an apparent acceptance of its meaning. If someone signs a contract under threat, the signature still exists, but it is no longer enough to establish a genuinely voluntary agreement.
• Did they know what they were accepting? The information needed varies with the decision. The more complex or serious its consequences, the more important clarity and an opportunity to ask questions become.
• Did they understand that information? Providing pages of technical terms does not guarantee understanding. The issue is not only what was communicated, but whether it was presented in a way that enabled a decision.
• Did they have the capacity to make that decision? Capacity does not always and everywhere amount to reaching a particular age. It may depend on the act, the circumstances, and the law that applies.
• Did the consent cover that specific purpose? Agreeing to one action does not automatically authorize others. Its scope should correspond to what the person decided.

These questions are not a universal legal test. They help avoid an overly quick inference: “they agreed, therefore everything is authorized.”

Express, implied, and presumed consent are not the same

Express consent is communicated directly: orally, in writing, or through another clear statement. Implied consent is inferred from conduct that, in its context, conclusively conveys a decision. Implied does not mean silent: inaction alone can be ambiguous and may not justify attributing a will.

So-called presumed consent is different. It attributes what a person who cannot communicate would probably have decided. Consider an emergency in which a patient is unconscious. There is no current decision expressed by that person; action is taken on the basis of an exceptional justification and the rules of healthcare. The Pan-Hispanic Dictionary of Legal Spanish itself distinguishes this presumption from actual consent.

It is also useful to distinguish related terms. Assent can describe agreement without satisfying every requirement for deciding legally on one’s own behalf. Authorization emphasizes permission for another person to act. And informed consent describes a process in which information and understanding are essential.

Key idea: Express consent is stated directly; implied consent is conveyed through conclusive conduct; presumed consent does not express a current will, but attempts to address the impossibility of knowing it.

Form depends on context

In healthcare, informed consent involves receiving information about an intervention, understanding it, and being able to decide. MedlinePlus explains that the process does not always require a written document: some actions may be consented to orally, while others require a signature. A treatment explained aloud, with an opportunity to ask questions, may involve more real decision-making than a form signed without understanding.

For personal data, the European Union’s General Data Protection Regulation (GDPR) provides a particularly precise sector-specific example. Where consent is the legal basis relied upon, it must be freely given, specific, informed, and unambiguous. Its official text makes clear that silence, pre-ticked boxes, or inactivity do not constitute consent, and that it may be withdrawn. These are European data-protection rules, not a worldwide definition applicable to every relationship.

So, agreeing that an app may use location data to map a route does not necessarily authorize its use for advertising. If purposes differ, a single generic click can conceal decisions that should be kept distinct.

In contracts, consent helps form voluntary agreements, but deciding also entails individual responsibility and may create obligations. It is therefore important to distinguish withdrawing authorization for future acts from disavowing commitments already made. The specific consequences depend on the applicable law and the agreement.

In criminal law, consent may matter for some conduct and have no effect for others. It does not make lawful everything that a person agrees to. Determining which interests may be subject to personal decision and under what conditions requires attention to each legal system; a general rule would be misleading.

Scope, refusal, and withdrawal

Giving consent once is not the same as granting unlimited permission. Every decision has an object, a purpose, and sometimes a duration. If any of these changes substantially, consent may need to be sought again.

Refusal deserves equal attention. For choice to be meaningful, there must be a real possibility of saying no, unless an independent legal obligation provides otherwise. An interface that makes refusal difficult, a relationship marked by a threat, or deliberately confusing information may compromise the freedom of the decision.

Withdrawal does not work the same way in every field. The GDPR, for example, permits a person to withdraw consent for data processing and specifies that withdrawal does not make prior processing unlawful. In other contexts, withdrawing permission for future acts may be possible without eliminating effects already produced or obligations validly assumed.

Key idea: Before inferring authorization, ask who decided, with what freedom and information, about which action, for what purpose, and for how long.

Personal consent is not political consent

The phrase can be confused with political consent, which concerns the legitimacy of authority and obedience to government. Although both concepts share the problem of attributing a will, they operate on different planes.

Individual consent concerns a personal decision about a defined action or obligation. Political consent considers whether—and how—it can be said that people subject to government accept a common authority. Voting, living in a territory, or using public services does not by itself amount to the specific authorization a person gives for a contract, a treatment, or a use of data.

A standard more demanding than mere formality

Consent protects a sphere of freedom because it requires taking each person’s will seriously. It also imposes a discipline: do not attribute more permission than was actually granted.

A “yes” is meaningful when it can be connected to a person capable of deciding, a sufficiently free choice, and an understandable, defined action. The way it is demonstrated, the information required, and the effects of withdrawal vary by context. The decisive question is not only whether someone agreed, but what they agreed to, under what conditions, and how far their decision extended.