Consent management records log individuals’ opt-ins, opt-outs, and updates to data-processing preferences. They make user choices visible and support privacy-first data sourcing. section 2.3.1
Treat these records as part of the organization’s broader privacy and governance foundation:
- Capture preference changes clearly so data handling reflects current user choices. section 2.3.1
- Maintain them alongside compliance documentation covering applicable privacy laws and internal security policies. section 2.3.1
- Use them from the point of collection, where privacy risks begin, rather than treating privacy as a storage-only concern. section 2.3.1
Figure 2.3 Sourcing layer: core data categories
Situates consent records within the sourcing layer’s core privacy and data categories. section 2.3.1
