If a client can give, refuse and revoke consent then they are considered?