Which of the following best represents consent under GDPR?

Under the General Data Protection Regulation (GDPR), consent must be explicit and informed, meaning that the individual (data subject) must understand what they are consenting to and provide a clear affirmative action indicating their permission. This goes beyond mere verbal agreement; it requires that the consent be specific, informed, and unambiguous. The data subject should be aware of the purpose of the data collection and how their data will be used.

Moreover, the GDPR emphasizes the need for consent to be easily distinguishable from other matters, and it must be provided voluntarily. This framework ensures that individuals have genuine control over their personal data, which is a fundamental principle of data protection under the regulation.

Additionally, while the possibility of withdrawing consent is also a key aspect of GDPR, the statement in this scenario specifically highlights the requirement for consent to be both explicit and informed, making it the best representation among the options provided.