use of consent in privacy and data protection