Designing a consent screen can look deceptively simple. Explain why personal data is required. Present the relevant information. Add a checkbox, toggle or button. Capture the individual's choice. But when an organisation actually begins implementing consent, the difficult questions start appearing. What exactly is the individual consenting to? Are different purposes sufficiently clear? Is consent actually required for every activity? Can optional processing be separated from