I recommend https://ipo.blog.gov.uk/2019/06/11/copyright-and-gdpr-for-ph... and https://www.mondaq.com/germany/data-protection/714306/does-t... here for a sense of how the PII consent framework here is different than commercial licensing.