Back to agent
Conceptconcept.consent-management

Consent Management

The operational practice of obtaining, recording, and machine-enforcing customer permissions for marketing communications across modalities. Consent state must be authoritative, near-real-time, and propagated to every activation point before any send.

confidence 88%v4reviewed Jun 11, 2026consent, governance, compliance, privacy, gdpr, tcpa, suppression

Consent Management covers the full lifecycle of customer permission: obtaining consent (opt-in flows, preference centers), recording it durably (consent logs with timestamp, channel, version of terms), and enforcing it machine-reliably at activation time (suppression before send, not after).

Why it is a first-class architectural concern. A CDP architecture that cannot enforce consent in real time before activation is incomplete. Consent violations carry regulatory penalties (GDPR fines up to 4 % of global annual revenue; TCPA statutory damages of $500–$1,500 per message), reputational risk, and, more immediately, channel erosion: users who receive unconsented messages revoke permission permanently.

The modality dimension. Each modality carries its own consent regime:

IAB TCF 2.2 and EU programmatic activation. TCF 2.2 (IAB Europe, in effect 2023; GVL v3) materially changed the consent-enforcement requirement for EU CDP-to-DSP pipelines:

The architectural implication. Consent state must be the first lookup at activation time, not an afterthought batch job. In composable stacks, this means the suppression/consent table must be queryable with sub-second latency from every activation pathway — a harder SLO to meet than batch reconciliation. In packaged CDPs, the vendor typically provides this layer; in composable architectures, it must be built.

The agent's job. When recommending architectures for regulated industries (healthcare, finance, insurance), surface consent management as a first-class workstream. Ask: "How does your consent state propagate from the preference center to each activation system?" If the answer involves batch jobs with hours of lag, flag the compliance risk before recommending higher-frequency activation.

Sources

Related

This node →

  • prerequisite-ofmodality.emailConsent must be validated before email activation; machine-enforced opt-out is a hard prerequisite of email channel operation.
  • prerequisite-ofmodality.smsTCPA requires express consent before any SMS send; consent management is a hard prerequisite of the SMS channel.
  • prerequisite-ofmodality.pushPush permission is platform-enforced; revocation must disable all targeting immediately.
  • prerequisite-ofpattern.fail-fast-within-complianceConsent infrastructure is a prerequisite of any compliant experimental activation; fail-fast within compliance cannot operate without machine-enforced consent as the guard rail.
  • governed-byconstraint.tcpa-prior-express-written-consent-smsConsent management architecture for SMS channel is scoped by the TCPA PEWC requirement — the consent record, suppression propagation, and opt-out handling requirements all derive from this constraint.
  • governed-byconstraint.glba-nonpublic-personal-information-financial-servicesConsent management architecture for financial services must implement GLBA opt-out logic at the field (NPI) level — GLBA's opt-out right governs sharing NPI with non-affiliated third parties independent of modality.
  • governed-byconstraint.hipaa-phi-cdp-healthcareConsent management for healthcare CDPs must satisfy the HIPAA Marketing Rule's written authorization requirement for PHI-based marketing — the standard opt-in/opt-out architecture is insufficient without explicit HIPAA-compliant authorization language.