It doesn’t say that.
No offence, but this is as difficult, and kind of pointless offer public legislation as a source like it is pointless guide me to secrets of swap offering man swapon. There is demand to some knowledge and I can read those man pages, but I don’t understand what I’m reading.
I’m working with these daily basis and any of these questions aren’t new for me. That’s why I give two recommendations:
- buy needed software and ask what consent wanted for everything (it doesn’t help because after all how that data is used is important, not consent per se)
- if an enterprise is big enough (like CDCK for example) that there is actual risk to get fines then must use legal division of company or pro level 3rd party