Essential sections of a consent centre
Here are the seven key components of a successful consent centre.
1. Identification data
A key component of privacy is being able to see and comprehend contact-recognizable information. This section may include email addresses, phone numbers, and physical addresses without being restricted to contact information. Added in accordance with the business’ requirements is any additional pertinent information (training, employer, etc.). Access to the data allows for modification, addition, or removal of the information.
2. Communication and subscription channels
The vast majority of businesses already have a procedure in place for customers to subscribe to and unsubscribe from relational communications. Nothing radically different needs to be done. Ordinarily, opt-in methods are adhered to. It’s possible to see a sample communication. An option to immediately unsubscribe from all relational mailings could be displayed if necessary.
3. Frequency optimizer
Another method for limiting data usage is to give contacts control over the communication frequency. You can specify the frequency at which data may be used for communication purposes using this feature. It can also be used to specify a shutdown period (6 months, 1 year, etc.).
4. Business relationship
A loyalty program, the use of a product or service, etc. are a few examples of factors that might affect the collection and use of data. You have consented to certain rules that are particular to this program as a member or customer. A link to the policy would appear here. This would explain how to leave the relationship program or end the business relationship in addition to giving a thorough explanation of the data collected and how it was used.
5. Data management
Two (2) separate components make up data management. The first is related to cookie-based behavioural data collection, and the second is related to data sharing with third-party service providers.
Collecting behavioural data
A significant change has occurred here, primarily as a result of Quebec’s passage of Law 25 (PL64). I support the #NoConsentNoTracking philosophy. I believe that the concept of behavioural tracking based on cookies or pixels should have already been included in our best practices.
In Quebec, you will have to formally request permission in order to conduct tracking on the website and through other channels as of September 2023. This will lead to a consent option, particularly in banner form, on your website and app. In our illustration, we only present one choice. However, some websites distinguish between analytical trackers and experience-personalization trackers. Again, it will be your responsibility to define and present the available consents in a clear manner. Just like with websites, it may be a good idea to get consent before collecting opening and click data at the level of the channels, primarily email.
Data sharing with third-party platforms
6. Data mobility
A person must be able to understand which systems are sharing their data, which is already mandated by the GDPR. The user can ask to view or delete the data. The data sharing ecosystem’s technologies could all be displayed by the consent centre in this situation. Using a form that must be filled out and sent to your customer service, you can choose to view or delete the data. Under the new law, this will be necessary for Quebec starting in 2024.
7. Adoption of policies
The policy acceptance history, including the context, date, and time, may be very significant. Clear policies should outline your expectations for the gathering, use, and privacy of personal data. You do not need to formally request your current contacts’ consent to the privacy policies again. Keeping track of the circumstances surrounding the adoption of policies or the introduction of new ones, however, might be a wise idea.
Transparency and giving control over consent management still need to be attained. The most crucial thing is to continue acting with respect. If you have policies in place but feel uncomfortable sharing them, just don’t. Slowly but surely, we will get there, and ethical behaviour will become clear in the coming years. Attempt to foresee the trend and provide a secure setting where your contacts can work freely right away.
#NoConsentNoTracking: Recover the bare minimum, grant control, and be transparent.