Consent should be obtained through clear, affirmative action. This can be achieved by providing a consent box that users need to actively check. Pre-ticked boxes do not constitute valid consent. Moreover, the consent request must be specific and separate from other terms and conditions.