Which of the following is a requirement for obtaining explicit consent under GDPR?

Obtaining explicit consent under the General Data Protection Regulation (GDPR) requires that consent is freely given and informed. This means that individuals must be allowed to make a genuine choice about whether to provide their consent, and they must understand what they are consenting to. The notion of "freely given" signifies that consent should not be a condition for service if it is not necessary for that service, ensuring that users are not coerced into giving consent.

Furthermore, "informed" consent implies that individuals must have clear and accessible information regarding the purpose of data collection, what their data will be used for, and who will have access to it. This empowers individuals to make decisions with full knowledge of the implications.

Consent obtained through inferred behavior or complex legal jargon does not meet the GDPR's standards, as these approaches fail to provide clear and understandable agreements necessary for valid consent. Additionally, indefinite consent would contrast with GDPR principles, which advocate for periodic review and renewal of consent to ensure it remains valid and informed.