If a client's consent for data sharing is limited to certain purposes, what must the adviser do?

• A. Share data with all third parties to maximize services.
• B. Ignore scope and share as needed to finalize a sale.
• C. Seek consent after sharing.
• D. Define the scope of consent and respect it; share only as defined by consent.

Answer: (D)

When consent is limited to specific purposes, you must define the exact scope of what can be shared and with whom, and then only share data within that defined scope. If a need arises for sharing beyond those purposes, you should obtain fresh consent or adjust the consent with the client. Sharing for purposes outside the approved scope or with unspecified third parties would breach the consent and breach privacy rules. So, define the scope of consent and respect it; share only as defined by consent.