Secondly, the consent must be obtained before any personal information is collected. This means that you cannot simply have a pre-checked box that users need to uncheck to opt-out. Instead, users must actively opt-in to the collection and use of their personal information.
Lastly, it is important to keep a record of user consent. This can be done through a simple log or database that records when and how users gave their consent. This will be important in case of any legal disputes or investigations.