Read it somewhere that it is expected that consent manager needs to be data blind i.e. they should not collected personal data of data principal and still manage consents. I am trying to understand how without collecting data - how they will ensure consent is provided by same person and ensure there is no fraud?