Correct - there has to be a clear indication that you are consenting. It can't just be hidden away in a 60 page document in a statement that says "I consent to being tracked, etc".