Consent Management
What is Consent Management?
Systems and processes for obtaining, recording, and managing user consent for the collection, processing, and sharing of personal data in compliance with privacy laws.
Terms that appear alongside consent management
Each of these is named in at least one of the same controls as consent management. The number is how many controls name both.
- audit 10 shared controls
- compliance 7 shared controls
- data protection 6 shared controls
- audit trail 5 shared controls
- encryption 5 shared controls
- breach notification 5 shared controls
- authentication 4 shared controls
- nist 4 shared controls
Frameworks that govern consent management
What the standards actually require on consent management
Requirements naming consent management across 6 standards, quoted from the control text.
Consent management and withdrawal. Control from Bahrain PDPL framework, domain: Bahrain PDPL: Data Collection & Consent.
BH-PDPL-02 · Consent management and withdrawal →Consent management covers consent gathering (granular, specific, informed, unambiguous, freely given, easy to withdraw) and consent management systems that persist, propagate and demonstrate consent across services in line with GDPR Article 7.
ENISA-DPE-6.6 · Consent management (gathering and systems) →Implement customer consent capture per Operational Guidelines Section 3 with informed + specific + freely given + revocable consent + clear data scope + retention + sharing partners + purpose. Maintain consent records for audit and replay.
NGOB-2 · Customer Consent Management and Lifecycle →Every FSP should develop and implement a consent management procedure setting out how consent is obtained from customers before personal data is processed, unless other laws restrict this, and recording the time consent was obtained, the identity of the data s...
rbf-guideline-4-protection-of-consumer-data-and-privacy-2024::6b · Paragraph 6b Consent management procedure →Section 4(3) of Kentucky CDPA establishes the Universal Opt-Out Mechanism (UOOM) requirement + reflects converging US state privacy law standards for browser-level opt-out signals.
KY-CDPA-Universal-Opt-Out-Mechanism-Recognized-Browser-Level-GPC-Global-Privacy-Control · Kentucky CDPA Universal Opt-Out Mechanism + Section 3 + Section 4 + Recognized + Browser-Level + GPC Global Privacy Control + UOOM + Honored for Targeted Advertising + Sale + Profiling + Annual List of Recognized Mechanisms →PSD2 remains the in-force EU payment-services framework. The European Commission adopted, on 28 June 2023, two proposals to update the EU payments framework: (a) COM(2023) 366 - the proposed Payment Services Directive 3 (PSD3);
PSD2-Status · PSD2 status - in force pending PSD3 + PSR adoption + transposition →Questions people ask about consent management
What is Consent Management?
Why is Consent Management important for compliance?
Which compliance frameworks address Consent Management?
Where can I learn more about Consent Management?
See how Consent Management applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.