Consumers have a right to be forgotten. That’s one of the lessons from Jen Underwood’s update on the EY’s General Data Protection Regulation (GDPR0. Companies will need a legal basis to collect and process data — that means getting “freely given, specific, informed and unambiguous” consent.