This is a tricky part. Detailed consent is user-hostile and easily gamed, you end up with users having to fight an army of the best and nastiest UX designers. There are compliance/fiduciary alternatives but they have all the downsides of corporate responsibility.