Consent and Authorization
Use clear consent and authorization clauses that identify purpose, data use, retention, and withdrawal procedures. For consumer-facing programs include ESIGN consumer disclosure per 15 U.S.C. §7001(c) and methods to withdraw consent.