PDPA (Personal Data Protection Act) is the legislation to protect the privacy of personal data. Within the legislation, there is a consent obligation. Examine the following examples and appraise if consent is deemed to have been given and is a valid consent. Discuss and explain your answers.

(a) Julie wants to sign up for a spa package. The spa insists that she agrees and gives consent for her personal data to be shared with third parties. If she does not give consent, then she could not sign up for the package. (8m)

(b) Sarah ordered a kitchen appliance from ABC through an e-commerce platform and provided her personal details for the purchase and delivery of good. She provided her credit card details and address as well as contact number. ABC had also asked for age and income level. Sarah refused to provide her age and income level. (17m)