How do I record consent?

Consent records document that a data subject has given their agreement to have their personal data processed for a specific purpose. Under GDPR, consent must be freely given, specific, informed, and unambiguous.

Steps

1. Log in to your DataShield HQ workspace.
2. Click Data Subjects in the left-hand navigation menu.
3. Find and click on the data subject you want to record consent for. If they don't exist yet, add them first.
4. Click on the Consent Records tab within the data subject's profile.
5. Click the + Add Consent button.
6. Fill in the consent details:
   • Purpose – The specific reason for processing (e.g. "Marketing emails", "Analytics").
   • Lawful Basis – Select Consent or the appropriate legal basis.
   • Consent Date – The date the subject gave consent.
   • Expiry Date – Optional. When the consent expires.
   • Notes – Any additional context (e.g. "Double opt-in via website sign-up form").
7. Click Save. The consent record is now attached to the data subject's profile.

Tips

• Always record how consent was obtained (e.g. checkbox on sign-up form, verbal consent) in the Notes field.
• Consent records are timestamped and auditable — they appear in the Audit Log.
• If consent is later withdrawn, use the Revoke Consent action rather than deleting the record.