Consent Management
What is Consent Management?
Systems and processes for obtaining, recording, and managing user consent for the collection, processing, and sharing of personal data in compliance with privacy laws.
Terms that appear alongside consent management
Each of these is named in at least one of the same controls as consent management. The number is how many controls name both.
- audit 10 shared controls
- compliance 7 shared controls
- data protection 6 shared controls
- audit trail 5 shared controls
- encryption 5 shared controls
- breach notification 5 shared controls
- authentication 4 shared controls
- nist 4 shared controls
Frameworks that govern consent management
What the standards actually require on consent management
Requirements naming consent management across 6 standards, quoted from the control text.
Consent Architecture is the core distinguishing element of the RBI AA Framework - all financial data sharing between FIPs and FIUs requires explicit + revocable + auditable customer consent mediated through the Account Aggregator.
RBI-AA-ConsentArchitecture-ConsentArtefact-ExplicitConsent-PurposeLimitation-CustomerDashboard-ORS-CMP · RBI AA Consent Architecture - Consent Artefact + Explicit Customer Consent + Purpose Limitation + Customer Consent Dashboard + Online Revocation Service + Consent Management Provider →Per OBS: consent management + data sharing scopes + 90-day reauthentication + user revocation.
UKOBS-3 · Consent Management and Data Sharing →Consent management and withdrawal. Control from Bahrain PDPL framework, domain: Bahrain PDPL: Data Collection & Consent.
BH-PDPL-02 · Consent management and withdrawal →Consent management covers consent gathering (granular, specific, informed, unambiguous, freely given, easy to withdraw) and consent management systems that persist, propagate and demonstrate consent across services in line with GDPR Article 7.
ENISA-DPE-6.6 · Consent management (gathering and systems) →Implement customer consent capture per Operational Guidelines Section 3 with informed + specific + freely given + revocable consent + clear data scope + retention + sharing partners + purpose. Maintain consent records for audit and replay.
NGOB-2 · Customer Consent Management and Lifecycle →Consent management and withdrawal. Control from Saudi Arabia PDPL framework, domain: Saudi Arabia PDPL: Data Collection & Consent.
SA-PDPL-02 · Consent management and withdrawal →Questions people ask about consent management
What is Consent Management?
Why is Consent Management important for compliance?
Which compliance frameworks address Consent Management?
Where can I learn more about Consent Management?
See how Consent Management applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.