Verifiable Consent Records
Description
Consent records must be verifiable: timestamp, scope, mechanism, withdrawal log.
⚠️ Risk Impact
Disputes over consent require defensible records. Verbal or implied consent fails DPDP.
🔍 How EchelonGraph Detects This
EchelonGraph's Tier 1 Cloud Scanner automatically checks for this condition across all connected cloud accounts. Violations are flagged as high-severity findings with remediation guidance.
🔧 Remediation
Consent management platform with audit trail. Records retained.
💀 Real-World Attack Scenario
A telco claimed user had consented to marketing but couldn't produce verifiable record. DPDP enforcement: assumed no consent; ₹30 crore.
💰 Cost of Non-Compliance
Unverifiable consent: ₹20-₹80 crore.
📋 Audit Questions
- 1.Consent records retained?
- 2.Timestamp + scope + mechanism?
- 3.Withdrawal log?
⚡ Common Pitfalls
- ⛔Verbal consent claimed without records
- ⛔Records purged too early
📈 Business Value
Verifiable consent is foundational to DPDP defense.
⏱️ Effort Estimate
Records system
EchelonGraph integrates with CMPs
🔗 Cross-Framework References
Automate DPDP Act DPDP-19 compliance
EchelonGraph continuously monitors this control across all your cloud accounts.
Start Free →