How do organizations verify consent when responding to a Data Subject Access Request (DSAR)?

Consent is often collected through clear opt-in methods such as website checkboxes, account registration confirmations, or consent forms. Pre-ticked boxes are usually not considered valid.