# Contact Forms under the GDPR

> Contact forms do not require consent under GDPR.

- Source: https://www.sidd.swiss/en/insights/contact-forms-under-gdpr/
- Language: en
- Published: 2018-08-05
- Last updated: 2025-03-21
- Author: Philipp Staiger
- Publisher: SIDD Institute for Data Protection and Data Security, a brand of Priverion GmbH, Zugerstrasse 32, 6340 Baar (ZG), Switzerland

## Contact Form under GDPR

Contact forms do not require consent under GDPR. The conditions for the lawfulness of processing personal data, as set out in Article 6 GDPR, are equivalent.

This means that companies can process contact form data under the legitimate interest of communicating with potential or existing customers and suppliers. However, it is essential to implement risk-appropriate technical and organizational measures.

In practice, this means that the form should be encrypted (e.g., via HTTPS).

---

This document is the Markdown rendition of the page linked above. Please cite the HTML URL.