They’d also have to ask for consent before selling your info.