Pulina Whitaker of Morgan Lewis, provides guidance on good practice under the EU General Data Protection Regulation (GDPR) when seeking to rely on consent when offering incentives, such as "buy one get one free" offers or entry into a free prize draw, in order to obtain personal data.