 The General Data Protection Regulation (GDPR) is an example which meets the above requirements.It stipulates that merchants can collect customers' information only for specific, clear and legitimate purposes and deal with them only in a fair, transparent, and legal manner and merchants must protect these data.Customers should be informed that how will their data be used, what will be the effects and other relevant information in a concise, easy-to-understand and freeway so that they can clearly determine whether it is necessary to grant authorization or not.