Consent under GDPR must be “freely given, specific, informed, and unambiguous.” This means that individuals must take an affirmative action to opt-in to receiving marketing emails, such as ticking a checkbox. Pre-ticked boxes or implied consent do not meet the GDPR standards.