Consent must be obtained through a clear affirmative action, such as checking an unchecked opt-in box. Pre-ticked boxes and passive acceptance (e.g., continuing to use a website) do not constitute valid consent under PECR. Additionally, consent must be specific, informed, and freely given.