Hi Andrew,
This seems to be a generally misunderstood topic, let me explain what and why you need a consent checkbox for:
Consent is appropriate if you can offer people real choice and control over how you use their data, and want to build their trust and engagement. But if you cannot offer a genuine choice, consent is not appropriate. If you would still process the personal data without consent, asking for consent is misleading and inherently unfair.
In all cases for GD the intended legal basis is “Legitimate interests” not consent.
This is the case for two reasons:
1. If the user did not give consent then nothing would happen and no data would be processed, so there is no “genuine choice” therefor consent is not appropriate.
2. All the data entered is used “as reasonably expected” by the forms.
If on the other hand you decided to capture all the email addresses entered in any GD form for your newsletter that WOULD require consent as it is not expected and the form would be able to be processed without it.
If you have any further questions please ask.
Thanks,
Stiofan