The Explicit consent rule requires a clear, unambiguous, and affirmative action from the user before processing their data, especially sensitive personal information.

Unlike implied consent, silence, inactivity, or pre-checked boxes are insufficient and illegal.

This stringent rule, central to laws like MODPA, dramatically impacts website design, demanding precise language and is often implemented alongside strong opt-out rights to give users complete control over their personal data.