> - that there has to be a single "no" button, but individual "yes" buttons for every single choice
GDPR requires neither of those explicitly, this is just the interpretation by most regional Data Protection Commissioners.
> but individual "yes" buttons for every single choice
This is misleading at best - there can be an "Accept All" Button.
> GDPR requires neither of those explicitly, this is just the interpretation by most regional Data Protection Commissioners.
No. https://gdpr-info.eu/recitals/no-32/ says:
> When the processing has multiple purposes, consent should be given for all of them
You wrote:
> This is misleading at best - there can be an "Accept All" Button.
No. https://gdpr-info.eu/recitals/no-32/ says:
> Silence, pre-ticked boxes or inactivity should not therefore constitute consent.
The legal text of the GDPR explicitly bans pre-ticked boxes for types of consent. You have to manually tick each box individually.