EVIDENCE ARTEFACTS
- Versioned event schema
- Delivery or processing acknowledgements
- Retry and exception record
CONTROL RECORD · REVIEWED 2026-08-30
Make consent event receipt an inspectable system decision with a named owner, defined trigger and retrievable evidence.
Catalogue status
not legal status
RECORD ANATOMY
IMPLEMENTATION SEQUENCE
Scope the decision: define the decision, owner, trigger, evidence and review path before implementation.
Record the approved design and its source-status verification boundary.
Connect implementation events to evidence that a reviewer can retrieve without broad production access.
EVIDENCE ARTEFACTS
CONTROL TEST
ANTI-PATTERNS
ARCHITECTURE → EVIDENCE DECISION JOURNEY
Each connection uses existing catalogue records. Source IDs remain verification pointers—not provision mappings.
Add to a review routeReview CONSENT-01 before testing this dependent record.
Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023Treat consent and withdrawal as versioned events that downstream systems must acknowledge.
Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025Trace the sample from its trigger and owner through the implemented system to the retained evidence. Record exceptions, confidence and remediation without converting an unknown into a pass.
Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023Delivery or processing acknowledgements · Retry and exception record
Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023Marking the control complete from self-attestation alone · Hiding missing, stale or inaccessible evidence behind a pass label
Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023Interoperability, receipt semantics, revocation reliability and minimised identity binding deserve design attention before integration claims are made. Radar context: Structured consent receipts is Adopt.
Editorial analysis · reviewed 2026-08-30 · sources dpdp-rules-2025, rules-landing-2025Compare framework concepts without treating a comparison as legal advice. This route remains optional if the destination is unavailable.
Contextual external property · no affiliation or availability implied| Record | Phase | Relationship | Status / boundary | Source pointers |
|---|---|---|---|---|
| CONSENT-02: Consent event receipt | 01 · Prerequisite | Affirmative-action capture Review CONSENT-01 before testing this dependent record. | Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023 | dpdp-act-2023 |
| CONSENT-02: Consent event receipt | 02 · Implementation pattern | Consent event and withdrawal propagation Treat consent and withdrawal as versioned events that downstream systems must acknowledge. | Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023, dpdp-rules-2025, act-commencement-2025 | dpdp-act-2023 · dpdp-rules-2025 · act-commencement-2025 |
| CONSENT-02: Consent event receipt | 03 · Validation / test | Select a recent, in-scope sample for consent event receipt and record why it was chosen. Trace the sample from its trigger and owner through the implemented system to the retained evidence. Record exceptions, confidence and remediation without converting an unknown into a pass. | Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023 | dpdp-act-2023 |
| CONSENT-02: Consent event receipt | 04 · Evidence artefact | Versioned event schema Delivery or processing acknowledgements · Retry and exception record | Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023 | dpdp-act-2023 |
| CONSENT-02: Consent event receipt | 05 · Failure mode | Treating “consent event receipt” as a policy sentence without an operating owner Marking the control complete from self-attestation alone · Hiding missing, stale or inaccessible evidence behind a pass label | Engineering indicator · not a legal requirement · Verification pointers: dpdp-act-2023 | dpdp-act-2023 |
| CONSENT-02: Consent event receipt | 06 · Research note | Consent Managers as infrastructure: interfaces, accountability and open questions Interoperability, receipt semantics, revocation reliability and minimised identity binding deserve design attention before integration claims are made. Radar context: Structured consent receipts is Adopt. | Editorial analysis · reviewed 2026-08-30 · sources dpdp-rules-2025, rules-landing-2025 | dpdp-rules-2025 · rules-landing-2025 |
| CONSENT-02: Consent event receipt | 07 · Specialist property | Comparative analysis Compare framework concepts without treating a comparison as legal advice. This route remains optional if the destination is unavailable. | Contextual external property · no affiliation or availability implied | None · contextual external route |
GENERIC VERIFICATION POINTER · NOT A PROVISION MAPPING
Provision-specific applicability must be verified against the primary-text ledger.
Boundary: Operational control pattern; not a standalone legal conclusion.
Open the source ledgerCONNECTED SYSTEM PATTERN
Treat consent and withdrawal as versioned events that downstream systems must acknowledge.
LOCAL WORKSPACE NOTE
Nothing is sent anywhere. Avoid names, personal data or confidential incident details.
CHANGE LOG
Version 1.3 — Architecture-to-evidence journey and non-personal review-route relationship added; verification-pointer boundary retained.
Version 1.2 — Official-source status rechecked; command-centre indexing and the non-mapping boundary retained.
Version 1.1 — Engineering fields, source verification pointers and acceptance evidence reviewed.
Version 1.0 — Stable catalogue ID, objective, evidence model, test sequence and verification boundary established.