Consent Records Need Context
Identify the minimum context needed to demonstrate a valid consent record.
A checked box is an event; a consent record is evidence. If you cannot reconstruct what the person agreed to, the record is thin. What to preserve Keep the purpose, consent wording version, timestamp, source, and user or contact identifier. If withdrawal matters, keep the withdrawal timestamp and suppression marker. What not to over-keep Evidence does not require storing the entire web session, all page analytics, or unrelated form fields forever. That can create new minimization problems. Why versioning matters Consent is specific to the wording and purpose at the time. If the copy changes from "monthly product email" to…
Sign up free — one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in