Governance & Compliance · Software component
Consent Manager
Software componentGovernance & ComplianceSafety, Security & Governancearc:ConsentManager
A governance service that presents granular per-purpose consent requests, records affirmative choices and processes withdrawals received through any channel so they take effect downstream.
Responsibility. Manages the lifecycle of per-purpose consent from request to withdrawal.
Also known as: Consent management system, Consent management platform
Relationships
is configured by structural
is invoked by dependency
writes dependency
is routed to by dynamic
triggers dynamic
Design guidance
- MUST request consent separately for each distinct purpose, with no pre-checked boxes, silence or implied consent.
- MUST make withdrawal as easy as giving consent (e.g., the same single tap).
- MUST NOT make consent for non-essential processing, such as marketing, a condition of the core service.
- SHOULD present optional requests (e.g., marketing) after users have experienced the service's value.
- SHOULD obtain opt-in authorization for specific proactive behaviours with explicit data scopes rather than blanket permission for any proactive purpose.
Quantitative guidance
As stated by the sources; verify before use.
- Withdrawals take effect within 24 hours regardless of channel: in person, web portal, phone or written notice (Ch9.7 hospital).
- Withdrawing nutrition consent deletes meal photos and food logs within 24 hours (Ch9.7 wellness app).
Classification
- Patterns
- Granular consentSequential just-in-time consent requestsEasy withdrawal
- Quality attributes
- Interaction capability (ISO/IEC 25010)Transparency and accountability (NIST AI RMF: accountable and transparent)
- Risks mitigated
- Consent fatigueInvalid bundled or pre-checked consentCoerced consent
- Frameworks & regulations
- GDPR Art. 7GDPR Art. 21
Sources
- Ch9.7: T. Nguyen, "GDPR and Data Protection Regulations," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 9.7. ISBN: 9798244538229.
- Ch10.2: T. Nguyen, "Proactive Agents," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 10.2. ISBN: 9798244538229.
- Ref9.05: "Privacy and Data Protection for AI Systems," unpublished reference note (references/Chapter 9 - Safety, Ethics, and Compliance/05-Privacy-Data-Protection.md), Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam supplementary materials, 2026. unpublished note