What consent records must contain for audit-proof compliance:
- ⏰ Exact timestamp (UTC)
- 🌐 IP address
- 📋 Source/method (form URL, channel)
- 📝 Exact consent language shown
- ✅ Consent type and version
- 🔄 DOI confirmation timestamp + IP
- 🎛️ Preference selections
- ❌ Withdrawal records
CASL requires records for 3 years after the relationship ends.
UK PECR has a soft opt-in exception for existing customers if:
- Details collected during a sale
- Marketing relates to similar products
- Clear opt-out was offered at collection
- Every email includes easy opt-out
Sign in to keep track of what you have read.