Consent must be freely given, specific, informed, and unambiguous. This means you cannot use pre-ticked boxes or vague statements to obtain consent. Instead, you should use clear and plain language to explain what data you are collecting and how you will use it. For instance, a sign-up form should have a checkbox (not pre-ticked) that users must actively click to indicate their consent.