Type of entity giving consent (Customer, Patient, Employee, User, etc.)

Example: "Customer"

Unique identifier of the entity giving consent

Example: "CUST-2024-00123"

Category of consent being tracked

Values: marketing, privacy_policy, terms_of_service, data_processing, cookies, analytics, medical_treatment, data_sharing, research, third_party_sharing

Example: "marketing"

Whether consent is currently granted (true) or withdrawn (false)

Example: true

Timestamp when consent was granted

Example: "2024-01-15T10:30:00Z"

IP address from which consent was granted (GDPR Article 7 proof requirement)

Example: "192.168.1.100"

User who granted consent (if obtained by staff on behalf of entity)

Example: {"@type":"User","userId":"support_042"}

Source or method through which consent was obtained

Values: web_form, mobile_app, api, customer_service, in_person, email, phone, import, manual

Example: "web_form"

Timestamp when consent was withdrawn

Example: "2024-06-15T14:20:00Z"

IP address from which consent was withdrawn

Example: "192.168.1.105"

User who withdrew consent (if withdrawn by staff)

Reason provided for consent withdrawal

Example: "No longer interested"

Version of the consent form, policy, or terms under which consent was given

Example: "2.1"

Language in which consent was presented and obtained

Optional expiration date for time-limited consents

Example: "2025-01-15T00:00:00Z"

Additional consent-specific metadata (form ID, document URL, etc.)

Example: {"formId":"consent_form_v2.1","documentUrl":"https://example.com/privacy-policy-v2.1.pdf"}

Reference to the customer who accepted or revoked GDPR consent (specialization of entityType/entityId from Consent)

Specific type of GDPR consent or data subject right

Values: privacy_policy, terms_of_service, data_processing, right_to_be_forgotten, data_portability, data_rectification, processing_restriction, profiling_opt_out

Example: "privacy_policy"

Version number of the policy document (privacy policy, terms, etc.)

Example: "2.1"

URL to the exact version of the policy document that was accepted

Example: "https://example.com/privacy-policy-v2.1.pdf"

SHA-256 checksum of the policy document for tamper-proof verification

Example: "a1b2c3d4e5f6...sha256"

Whether this is the current/latest version of the policy

Timestamp when consent was revoked (for GDPR Article 17 Right to be Forgotten requests)

Example: "2024-08-20T16:00:00Z"

GDPR Article under which consent was revoked

Values: right_to_be_forgotten, data_portability_request, processing_restriction, objection_to_processing, consent_withdrawal, other

Example: "right_to_be_forgotten"

Timestamp when GDPR data subject request was completed

Example: "2024-08-25T10:00:00Z"

Date until which data will be retained per GDPR compliance (after which data must be deleted)

Example: "2027-01-15T00:00:00Z"

GDPR Article 6 legal basis for data processing

Values: consent, contract, legal_obligation, vital_interests, public_task, legitimate_interests

Example: "consent"

Categories of personal data covered by this consent

Example: ["identity","contact","financial","behavioral"]

Purposes for which data processing was consented

Example: ["service_delivery","marketing","analytics","fraud_prevention"]