Notice, Consent & Consent Managers

Itemized data/purpose notice design, affirmative consent capture, multilingual delivery, legacy data remediation (s.5(2)), and Consent Manager registration.

Mapped Controls & Evidence Obligations

Appendix B Control Master Matrix rows governing this lifecycle.

5 Controls

OBL-04 Section 5 (notice; Section 5(2) legacy)

SPEC-Q10-OBL-04

Itemised Notice & Legacy Consent Transition

Issues transparent multilingual notice and manages pre-commencement consent transition.

Owner: Product / privacy Open Workpaper →

Systems: Customer App & Web Portal (SYS-001); Consent Ledger & Policy Decision Point (SYS-010)

OBL-05 Section 6; (9) CM registration; (10) fiduciary proof

SPEC-Q10-OBL-05

Consent Capture, Withdrawal & CM Registry

Governs affirmative consent lifecycles, withdrawal requests, and Consent Manager registration.

Owner: Product / privacy engineering Open Workpaper →

Systems: Consent Ledger & Policy Decision Point (SYS-010); Processor Orchestration Gateway & Queue (SYS-013)

OBL-07 Rule 3 (Notice Content)

SPEC-Q10-OBL-07

Notice Content & Language Presentation

Mandates itemised data/purposes, DPO contacts, and Eighth Schedule language support (Rule 3).

Owner: Product / privacy Open Workpaper →

Systems: Customer App & Web Portal (SYS-001); Consent Ledger & Policy Decision Point (SYS-010)

OBL-46 Section 2(g)

SPEC-Q10-OBL-46

Consent Manager Interoperability (Section 2(g))

Interoperates with Board-registered Consent Managers acting as trusted intermediaries.

Owner: Legal / CM integration owner Open Workpaper →

Systems: Consent Ledger & Policy Decision Point (SYS-010); synthetic external CM adapter

OBL-47 Rule 4

SPEC-Q10-OBL-47

Consent Manager Interface & Security Standards (Rule 4)

Implements secure APIs, cryptographic logs, and technical specifications for Consent Managers.

Owner: Legal / CM integration owner Open Workpaper →

Systems: Consent Ledger & Policy Decision Point (SYS-010); synthetic external CM adapter

Mechanism Chapters

Detailed architecture, implementation patterns, and case studies.

Ch.09

Chapter 9 — Notice and Consent Experience Design

Part II — Target Operating Model & Core Workflows · 17 min read

Read Chapter →

Ch.10

Chapter 10 — Consent Withdrawal and Downstream Cessation

Part II — Target Operating Model & Core Workflows · 17 min read

Read Chapter →

Ch.11

Chapter 11 — Consent Managers and Consent-Management Software

Part II — Target Operating Model & Core Workflows · 16 min read

Read Chapter →