Consent as evidence, not a click: notice records, receipts, REALconsent and the ISO notice and consent standards.
Notice & Consent
A click recorded after someone has already been identified is a system permission, not evidence of an informed choice. REALconsent sets out what has to be in place for consent to be real, and provable later.
Notice & Consent
The Kantara ANCR extension to ISO/IEC TS 27560:2023 defines four records that let anyone check who was accountable for a notice, which version was shown, and when, without identifying the person who received it.
Notice & Consent
The consent record information structure turns consent from a setting inside one application into evidence that can be kept, exchanged, compared and audited.
Notice & Consent
ISO/IEC 29184 sets the controls for how an online privacy notice is presented and how consent is asked for. Evidence only helps if the notice itself was clear, timely and tied to the processing.
Identity
Notice before identification puts the sequence back: what must be inspectable before you are asked to identify, and why TCIEG is launching to standardise it.