In RPE we have a SHALL against the DE:
"Ensure that their Service Providers have the minimum standard consent from Consumers". I have left it in, because this can be covered by a contractual terms of use of the DE. However, I think there is still an issue here. As a DE how do I know that Joss gave his consent without know who Joss is? I think we just need a short discussion and a note added to the at some point in the future.