Sort of an interesting related question around privacy policy updates maybe? If a user hasn't interacted with your platform in multiple years, it becomes hard

Sort of an interesting related question around privacy policy updates maybe? If a user hasn't interacted with your platform in multiple years, it becomes hard to validate that they've consented to any data-use changes you push out.