It must be freely given, specific, informed, and unambiguous.
Pre-ticked boxes, bundled consent, or no real choice can undermine validity.
GDPR, Regulation (EU) 2016/679
Deep dive
Valid consent: four pillars, one trap
Consent must be freely given, specific, informed, and unambiguous; the main exam trap is bundled or pre-ticked consent, which fails the 'freely given' test.