Obtaining the consent of the data subject before collecting, recording, organizing, structuring, storing, adapting, altering, disclosing or disseminating personal data is underscored under the Data Protection Act, 2019. Although there is no prescribed form of consent under the Act, the law requires that any consent to the processing of personal data must be express, unequivocal, free, specific and informed. Notably, it is the data processor or controller who has the responsibility of proving that the data subject consented to the processing of their personal data in the event of a dispute.