Consent record validation

Control Design Assessment (CDA)

Procedures evaluating whether the control is designed adequately.

1. 1.Obtain and read the consent-validation procedure; confirm it requires checking current consent status before each marketing use of customer data.
2. 2.Confirm the validation checks the authoritative consent system rather than a cached or exported list.

Control Operating Effectiveness (COE)

Procedures evaluating whether the control operated over the testing period.

1. 1.Select 25 marketing campaigns from the period and confirm customer data used was validated against current consent records.
2. 2.Confirm customers who withdrew consent were excluded from subsequent campaigns.
3. 3.Confirm validation exceptions identified in the period were investigated and remediated.

Linked risks

• Privacy consent management failuremitigation 3

Framework mappings & latest test