Consent Management
Current purpose status and consent event log (accept / reject / withdraw / re-accept).
What gets logged for every consent action
- Log ID · purpose · decision (accepted / rejected / withdrawn)
- Timestamp · channel (web / OTP session)
- Actor (phone) · previous status
Current purpose status
| Purpose | Status | Required | Data items | Last updated |
|---|
Consent event log
| When | Event | Purpose | Decision | Channel | Log ID |
|---|
Personal Data Discovery
Every personal field is tagged so it can be searched, exported, and deleted under DSAR.
| Field | Value | Tags | System | Purpose link | Retention |
|---|
Consent Withdrawal
Withdraw consent for any purpose with OTP. Linked personal data for that purpose is cleared; consent + deletion logs are kept.
| Purpose | Status | Linked data | Action |
|---|
Data Principal Requests (DSAR)
Locate, export, or erase personal data. Erasure requires OTP. Deletion logs are retained for audit.
Locate my data
Search all tagged records linked to this principal.
Request erasure
OTP-gated. Preview → verify 123456 → clear values. Logs stay.
Deletion logs
| When | Scope | Fields removed | OTP verified | Request ID |
|---|
Audit Evidence
Tamper-evident SHA-256 chain covering login, consent, withdrawal, DSAR, and verification events.