Back to Module
6 of 11|Consent Management Framework
reading 15 min•Consent Architecture
Logging & Audit Trail
Keeping records to prove compliance.
🎯 Learning Objectives
- ▸ Understand what to log
- ▸ Design an audit trail
Audit Requirements
The burden of proof is on the Data Fiduciary. If a user complains that they never gave consent, you must have the logs to prove otherwise.
- • Timestamp of consent
- • IP address
- • User ID
- • The specific version of the Privacy Notice they agreed to
- • The exact action they took (e.g., clicked "Accept All")
📖 Glossary
- Audit Trail
- A chronological record of system activities that enables the reconstruction and examination of events.
🔑 Key Takeaways
- Log every consent event (give and withdraw).
- Include timestamps, IP addresses, and the exact notice version shown.
- Store logs securely and prevent tampering.
📚 Further Reading
- DPDPA Section 8 — Government of India (2023)
Course Author
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...