31. A privаtely held U.S. cоmpаny sells prоducts оnline to customers in Cаlifornia and several European Union countries. The company deploys an AI chatbot on its customer service website and collects personal information that users, including those residing in California and the EU, enter into the chatbot. Which of the following compliance measures is consistent with both the GDPR and the CCPA?