Consent register

The consent register is the systematic record-keeping of consents obtained: who consented, to what, when, through which channel, with which wording. The GDPR requires the data controller to demonstrate compliance — not merely to be compliant — and this register is the tool of that demonstration. A checked box doesn't legally exist until it's archived with its context.

In practice, the register is a five-column table — identifier, date, channel, displayed text, purpose — that any serious tool keeps for you: the CRM timestamping the opt-in, the SMS platform archiving the sent keyword. An audit from a customer or an authority must be answerable in minutes, not weeks of digging through exports. And unlike the opt-out registry, this one records the "yeses" — the two are kept together.