Comment by bilbo0s

Right.

I'm not sure this is fixable?

Or maybe there is widespread misunderstanding of the requirements in this scenario? But I also thought the rule was tough enough to require verifying that extra consent? Maybe it's not?

Truly confused here.