How should third-party information be obtained in a compliant underwriting process?

• A. With written consent, from approved sources, and in compliance with privacy laws and company policies
• B. Verbal consent from any party is sufficient
• C. From public social media posts alone
• D. From internal company notes only

Answer: (A)