Where consent is used as a ground of processing under GDPR, when must it be explicit in nature?

A country should allow its citizens to access specific information owned by the government in order to
bring transparency in the government administration processes. This is the basis for formulation of which
of the following rights in India?

With reference to APEC privacy framework, when personal information is to be transferred to another person or organization, whether domestically or internationally, "the ______________ should obtain the consent of the individual and exercise due diligence and take reasonable steps to ensure that the recipient person or organization will protect the information consistently with APEC information privacy principles".

Which type of data qualify as Sensitive Personal Data or Information under Section 43A of IT (Amendment)
Act, 2008?

What are the roles an organization can play from privacy perspective?
i. Data Controller - determines the means and purpose of processing of data which is collected from its end customers ii. Data Controller - determines the means and purpose of processing of data which is collected from its employees iii. Data Sub-Processor - processes personal data on behalf of data processor iv. Joint Controller - determines the means and purpose of data processing along with other data controller Please select correct option: