GAPP stresses the importance of obtaining consent when collecting, using, and sharing information about customers. If a company’s policy is to ask customers for permission to collect sensitive personal information and then only asks questions about sensitive matters (such as political beliefs or sexual orientation) after the customer agrees to answer such questions, it is following the process referred to as .

a. explicit consent (opt-out)

b. explicit consent (opt-in)

c. implicit consent (opt-out)

d. implicit consent (opt-in)