According to the GDPR, effective consent must be voluntary, informed, given for the specific case and based on an unambiguous expression of will. It must be verifiable and revocable at any time.