The personal data subject decides on the provision of his personal data and agrees to their processing freely, voluntarily and in his own interest. Consent to the processing of personal data must be specific, substantive, informed, conscious and unambiguous. Consent to the processing of personal data may be given by the personal data subject or his representative in any form that allows to confirm the fact of its receipt, unless otherwise established by federal law. If consent to the processing of personal data is obtained from a representative of the personal data subject, the authority of this representative to give consent on behalf of the personal data subject is verified by the operator.
(ed. Federal Law No. 266-FZ of 07/14/2022)

Consent to the processing of personal data may be revoked by the personal data subject. If the personal data subject withdraws consent to the processing of personal data, the operator has the right to continue processing personal data without the consent of the personal data subject if there are grounds specified in paragraphs 2-11 of part 1 of Article 6, part 2 of Article 10 and part 2 of Article 11 of this Federal Law.

The obligation to provide proof of obtaining the consent of the personal data subject to the processing of his personal data or proof of the existence of the grounds specified in paragraphs 2-11 of part 1 of Article 6, part 2 of Article 10 and part 2 of Article 11 of this Federal Law is assigned to the operator.

In cases stipulated by federal law, personal data processing is carried out only with the written consent of the personal data subject. Consent in the form of an electronic document signed with an electronic signature in accordance with federal law is considered equivalent to a written consent on paper containing a handwritten signature of the personal data subject. The written consent of the personal data subject to the processing of his personal data must include, in particular:

1) the surname, first name, patronymic, address of the personal data subject, the number of the main identity document, information on the date of issue of the specified document and the issuing authority;
2) the surname, first name, patronymic, address of the representative of the personal data subject, the number of the main identity document, information on the date of issue of the specified document and the issuing authority, details of a power of attorney or other document confirming the authority of this representative (upon receipt of consent from the representative of the personal data subject);
3) the name or surname, first name, patronymic and address of the operator receiving the consent of the personal data subject;
4) purpose of personal data processing;
5) a list of personal data for which the personal data subject's consent is given.;
6) the name or surname, first name, patronymic and address of the person who processes personal data on behalf of the operator, if processing will be entrusted to such person;
7) a list of actions with personal data for which consent is given, a general description of the methods of personal data processing used by the operator;
8) the period during which the consent of the personal data subject is valid, as well as the method of its revocation, unless otherwise established by federal law;
9) signature of the personal data subject.

The procedure for obtaining, in the form of an electronic document, the consent of a personal data subject to the processing of his personal data for the provision of state and municipal services, as well as services that are necessary and mandatory for the provision of state and municipal services, is established by the Government of the Russian Federation.

In case of incapacity of the personal data subject, consent to the processing of his personal data is given by the legal representative of the personal data subject.

In the event of the death of a personal data subject, consent to the processing of his personal data is given by the heirs of the personal data subject, if such consent was not given by the personal data subject during his lifetime.

Personal data may be obtained by the operator from a person who is not the subject of personal data, provided that the operator is provided with confirmation of the existence of the grounds specified in paragraphs 2-11 of part 1 of Article 6, part 2 of Article 10 and part 2 of Article 11 of this Federal Law.

The requirements for the content of consent to the processing of personal data authorized by the personal data subject for dissemination are established by the authorized body for the protection of the rights of personal data subjects.
(Part 9 was introduced by Federal Law No. 519-FZ of 12/30/2020)