Following a public consultation, the Spanish Data Protection Agency (AEPD) has issued a report on how to obtain consent online. In its report, the AEPD reiterated that data controllers have the burden to prove that data subjects have been well informed before providing their “specific and unequivocal” consent. Subsequently, when collecting data through web sites, consent has to be requested in a way that makes it impossible for the data subject to provide personal data unless he has read all the necessary information related to the processing. The full text of the report is available (in Spanish) here.