3 ms·

absolutely - but they do not have to ensure that data they process is properly consented - that is the role of the data collector.