Agents must obtain and document the consent of the consumer or their authorized representative prior to assisting the individual with application or enrollment through the Exchange. Such documentation of consent must produce a record of the consent that includes a description of the scope, purpose and duration of the consent, the date consent was given, the name of the consumer and if applicable the authorized representative, the name of the agent or agency being granted consent, and the process through which the consumer or authorized representative may rescind consent. The record of consent must be maintained for 10 years, and provided to the Exchange upon the Exchange’s request.