Back to Module
4 of 11|Consent Management Framework
reading 15 min•Consent Architecture
Consent Lifecycle
Tracking consent from the moment it is given to the moment it is deleted.
🎯 Learning Objectives
- ▸ Map the consent lifecycle
- ▸ Understand what data to capture at each stage
The 5 Stages
- • 1. Notice: User is shown the privacy notice.
- • 2. Collection: User gives explicit consent.
- • 3. Storage: The consent artifact (record) is securely stored.
- • 4. Usage: Data is processed according to the consent.
- • 5. Withdrawal/Expiry: User withdraws consent, or the purpose is fulfilled, and processing stops.
📖 Glossary
- Consent Artifact
- A digital record that proves a user gave consent, including timestamp, IP address, and the exact text they agreed to.
🔑 Key Takeaways
- Consent must be tracked from collection to deletion.
- You must be able to prove that consent was obtained.
- Withdrawal must be logged just like collection.
📚 Further Reading
- Consent Management Best Practices — IAPP (2022)

Course Author
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...