Obtaining Consent — which statement best describes the requirement?

• A. The knowledge and consent of the consumer are required for collection, use or disclosure except where inappropriate.
• B. Consent is never required.
• C. Consent is required only for marketing.
• D. Consent can be implied for all data.

Answer: (A)

Consent in handling personal information means you have the consumer’s knowledge and permission before you collect, use, or disclose their data, and you should only use or share it for the stated purposes. There are appropriate exceptions—situations where it would be inappropriate to seek consent, such as when you need information to provide a service the consumer has requested or when disclosure is required by law or for safety. This is why the best description is that knowledge and consent are required for collection, use, or disclosure except where inappropriate: it reflects the general rule plus the valid exception.

The other statements aren’t correct because consent isn’t never required; it’s needed in many cases, including more than just marketing. And consent cannot be assumed for all data; some information requires explicit consent, especially for sensitive or broader uses.