The Digital Personal Data Protection Act, ratified in August this year, mandates that any company or individual collecting, managing or working with data from other users must obtain explicit consent from them bytelling them about the purpose for which the said data has been obtained.