"Consumers who sent private information to DrKoop must give their consent before their data can be transferred to a third party, including any entities that buy the DrKoop Web site, the state attorney general's office said." . . . .