Consent and preference management: two different jobs that share one screen

Updated

The phrase joins two jobs that look the same to a user and behave completely differently underneath. Getting them confused produces either a consent record that will not stand up, or a preference centre that treats a choice about newsletters as if it were a legal basis. This is where the line falls.

Consent: a lawful basis, and therefore evidence

Consent is one of the grounds on which processing is permitted at all, which means the burden is on you to show it was given. A consent record that cannot say what was shown, what was ticked, when, and by whom is not evidence of anything. This is why a consent store keeps the version of the notice as well as the answer.

Preference: a choice you have promised to honour

A preference is not a legal basis. It is a promise: you asked which of three newsletters somebody wanted and they told you. Nothing about it requires proof of what the form said. It requires only that the sending systems read it and that you can show when it changed.

Why one screen is still right

Because the person does not care about the distinction and should not have to. One place to see and change everything is a better experience and a better record. What has to differ is the storage: the consent rows carry the notice version and the evidence, the preference rows do not.

The mistake that costs most

Treating a preference change as consent withdrawal, or vice versa. Somebody unticking a newsletter has not withdrawn consent to be a customer, and somebody withdrawing analytics consent has not asked to stop receiving their receipts. Systems that collapse the two either over-delete or under-honour, and both generate complaints.

Questions people ask about consent and preference management

Do we need both?

If you run any marketing, yes. Preferences alone leave you with no evidence where consent is your basis; consent alone leaves people with no way to say less rather than none.

Where should the records live?

In one store that the sending systems read, keyed to the person rather than to a channel. Two copies means two answers to the same question.

How long do we keep withdrawn consent?

Keep the record of the withdrawal at least as long as you keep the underlying relationship. Deleting the evidence that somebody said no removes your only defence against the complaint that you ignored them.

Sources

Related answers

Keep the request record: $10 a monthStart the request record