Free HTML Consent Form Generator

When you need a named person to agree to a named thing, and it is not a medical procedure or a DSAR, this is the generic consent generator. Publish the thing they are agreeing to, then capture a typed signature.

Form Builder

#3b82f6

How to Use This Form Generator

1

Create a Form ID

Decide who may export consent records.

2

Write the consent object

Paste counsel or compliance-approved text above the snippet.

3

Leave the checkbox unchecked

Especially for UK GDPR-style consent.

4

Record versioning

If the text changes, change the URL or add a version field in copied HTML.

What is a generic consent form?

Consent forms appear for research participation outside a hospital IRB portal, for community programmes, for communications opt-in that needs a paper-trail feel, and for ‘I have read the rules’. US FTC and state consumer rules still care whether consent was clear. UK GDPR treats consent as a high bar when it is the lawful basis—pre-ticked boxes fail, and bundling consent with unrelated terms fails.

If your actual need is HIPAA authorization, parental permission, or a data-subject request, use those specialised generators so the default copy matches the legal regime.

Make the object of consent unmistakable

‘I agree’ with no object is how regulators and courts ignore you.

  • Legal name and email
  • What they are consenting to in the activity field and in page headings
  • Acknowledgement checkbox that is off by default
  • Typed signature and date

No government ID uploads. Consent to a programme is not a KYC check.

Consent capture options

Cookie banners are not this form. Neither is a buried terms link.

1. HTML consent page

A form when you need a named record.

2. E-sign packet

When the consent sits inside a larger contract.

3. Verbal consent logged in a CRM

Harder to prove. Fine for low-risk operational notes.

4. Implied by participation

Often too weak for marketing or for special-category data.

Static consent landing pages

Keep the full consent text on the same static URL as the form so the hash of what they saw is reconstructable.

For UK GDPR consent, log what they saw and allow withdrawal. For US marketing, still honour CAN-SPAM/TCPA/PECR as applicable.

Frequently Asked Questions

Is this medical consent?

Use the medical consent generator if treatment is involved.

Is this cookie consent?

No. Use a CMP. This is a named-person acknowledgement.

Can I pre-tick the box?

Do not if you are relying on GDPR consent. Even outside GDPR it looks bad.

Children?

Use parental consent. Age gates on a public form are easy to lie through.