- Severity
- MODERATE
- Status
- IN PROGRESS
- Owner
- Chief Data Office
- Root cause
- Data governance
- Test failure
- Operating effectiveness (COE)
- Opened
- 2026-05-08
- Due
- 2026-09-15
- Closed
- —
54 days old as of 2026-07-01
Campaigns executed against data lacking validated consent records.
FAIL
tested 2026-04-30
This issue records a COE failure, shown first.
Control Operating Effectiveness (COE)
Procedures evaluating whether the control operated over the testing period.
- 1.Select 25 marketing campaigns from the period and confirm customer data used was validated against current consent records.
- 2.Confirm customers who withdrew consent were excluded from subsequent campaigns.
- 3.Confirm validation exceptions identified in the period were investigated and remediated.
Control Design Assessment (CDA)
Procedures evaluating whether the control is designed adequately.
- 1.Obtain and read the consent-validation procedure; confirm it requires checking current consent status before each marketing use of customer data.
- 2.Confirm the validation checks the authoritative consent system rather than a cached or exported list.
Related issues
Same root cause or a shared entity
Score contribution
Issue-pressure points as of 2026-07-01, before the factor is capped at 0–100.
- Customer Data Domain12 of 51 pts
23.5% of this entity’s issue pressure
Annual priority score: 66 · issue pressure carries 10% weight in the active model — one factor among several behind that score.
- MODERATE severity: 12
Linked entities
- Customer Data Domain
DATA DOMAIN · CRITICAL