Significantly, in each situation, consent isn’t the only exception to a stated prohibition or the only foundation for permitting the treatment of private information in a certain way. Even if it is not legally required