GAAP stresses the importance of obtaining consent when collecting, using, and sharing informaton about customers. if a company's policy is to ask customers for permission to collect sensitive personal information and then only asks questions about sensitive matters after the customer agrees to answer such questions it is referred to as?