What is stipulated regarding consent for personal information processing?

The requirement that consent must be given by the data subject beforehand reflects the fundamental principle of the Data Privacy Act, which prioritizes individual autonomy and control over personal data. This stipulation ensures that individuals are fully aware of and agree to how their personal information will be processed, allowing them to make informed decisions regarding their data.

Obtaining consent prior to processing personal information protects individuals' rights and promotes transparency between data subjects and entities that handle their data. By mandating prior consent, the regulation aims to prevent unauthorized use of personal information and ensures that data subjects have the right to withdraw their consent at any time, thereby reinforcing their privacy rights.

This contrasts with other options, where no prior consent, retrospective consent, or focusing only on minors does not adequately uphold the principles of informed consent that are central to data protection laws.