Companies must give clear, plain-language notice seeking informed consent with itemised data description, processing purpose, ...