- Personal choice and informed decision making/consent.
- Commitment from publisher about use of data.
- Technology to communicate and form an agreement.
- Any subsequent data request must comply with agreement.
- Once agreed to, future requests can happen seamlessly.