A Practice Note providing an overview of the EU General Data Protection Regulation's (GDPR) requirements when relying on consent as the legal basis for processing personal data. This Note provides an overview of the GDPR's principles relating to personal data processing and the requirements for obtaining valid consent. This Note also discusses the requirements and justifications for processing employee personal data and the specific issues around obtaining consent in the employment context.