Organizations must ensure that proper consent is obtained from data subjects or establish some other lawful basis for processing before processing their personal data. What's another requirement that must be met before processing data? 1.- Notify subjects after processing their sensitive personal data
2.- Request that users verify their nationalities and occupations before processing the information.
3.- Provide a simple method for data subjects to withdraw consent
4.- Review each data subject's user history to ensure they have not been asked to give consent to data collection within the past six months.