GDPRIQ

🔄 Consent Expiry Calculator

Enter when consent was given and your policy refresh interval to see when it should be re-obtained and how many days remain before it goes stale.

Informational only — NOT legal advice. Consult a qualified data-protection lawyer or your supervisory authority; regulations vary by jurisdiction and change over time.

🧮 Date the next re-consent

🔄 Re-consent due

Refresh consent by
2026-07-04
Interval
12 months
Days remaining
0

The GDPR sets no fixed expiry for consent, but stale opt-ins weaken the case that consent is still specific and informed. A refresh interval is an internal policy choice, not a statutory deadline. Informational only — not legal advice.

What this calculator does

Consent is not a one-time tick that lasts forever. The longer an opt-in sits untouched, the weaker the claim that it is still specific and informed. Setting a refresh interval turns that vague risk into a scheduled action, and this tool projects the due date so it lands in your calendar rather than a regulator's report.

The interval is a policy decision, not a rule the GDPR spells out. Pick a cadence you can justify for the context, record it, and re-ask rather than assume.

❓ Frequently Asked Questions

Does GDPR consent expire?

The GDPR does not set a fixed expiry date for consent. However, recital 32 and regulator guidance stress that consent must remain specific, informed, and a genuine indication of the person's wishes. As consent ages it becomes harder to argue it still meets that bar, so many organisations set an internal interval to refresh it. Informational only, not legal advice.

How often should we refresh consent?

There is no single legal answer — it depends on the context, how people's expectations may have shifted, and the sensitivity of the processing. Common internal policy intervals are 12 or 24 months. The right cadence is a documented policy choice, not a statutory deadline, and this calculator simply projects the date from whatever interval you set.

What should refreshing consent involve?

Re-obtaining consent means giving people a fresh, clear opportunity to opt in — not assuming continued consent from silence. Keep records of when and how consent was given, make withdrawal as easy as giving it, and stop the processing that relied on consent if it is withdrawn or not renewed.

Is this legal advice?

No. This tool is informational only and not legal advice. Whether your consent is still valid, and how often to refresh it, depends on the facts and your jurisdiction. Consult a qualified data-protection lawyer or your supervisory authority; guidance varies and changes over time.