Explicit consent (GDPR)
A higher consent standard required for special-category data processing under Article 9(2)(a): must be freely given, specific, informed, and involve an explicit affirmative act. Blanket consent in employment contracts is insufficient.