GDPR requires us to keep evidence of consent means that I must be able to provide proof of:
- Who consented
- When they consented
- What they were told at the time of consent
- How they consented
- Whether they have withdrawn consent
Strikingly forms do an ok job because right now I can't customize the consent wording and have to manually keep track of the terms and policy versions. I suggest the following:
- Let site designers customize consent wording in the GDPR consent checkbox that doesn't just point the user to terms and conditions or privacy policy.
- Keep a record of the consent wording, terms and conditions, and privacy policy at the time of user consent for each form submission.
Thanks in advance!