In the digital age, personal data is hugely valuable. Companies are eager to access this data, but regulations like the EU’s General Data Protection Regulation (GDPR) require users’ explicit consent. What GDPR doesn’t specify, however, is how firms should ask for that consent. Some lean on transparency, while others sweeten the deal with persuasive tactics, like offering discounts in exchange for personal information.