I think you can get to a more robust consent requirement with the principles that are there. We suggested incorporating privacy by default explicitly as a guiding principle. I glossed over it a bit because you were short on time, but I would emphasize the need—in those situations—to have a pop-up that says, “Oh, by the way, we're going to read through your emails, and if there's something that says 'suits', you're going to get suit ads. If not, go here and check over here”. Privacy by default would push a more explicit interaction there. There is a choice.
On March 23rd, 2017. See this statement in context.