15 Jul 2019
London, UK. 25th June 2019. The makers of Consentua, the world leading consent management platform have decided not to renew their subscription to the International Advertising Bureau on July 1st 2019, as they feel the ethos of the IAB consent framework cannot be reconciled with the aims of the Consentua produc - Making it easy to do the right thing, by helping data controllers to be trustworthy and supporting individuals to have choice and control.
Richard Gomer, Consentua, Product Director said, “At the heart of our consent and preference management platform are the key principles of trust, control, and regulatory compliance. We make it easier for data controllers to process data Lawfully, Fairly and Transparently, and we give choice and control to data subjects. The Information Commissioner’s Office (ICO) recently confirmed that the $200bn ad tech industry buy and sell adverts in real time auctions in a way that is illegal, and contrary to what we believe is sustainable, responsible, or ethical.”
The decision to not renew has been made easier by the ICO’s finding that the AdTech industry’s current use of personal data is not legal.
Chris Cooper, Consentua, Chief Technology Officer further added, “The saving grace, is our platform has been designed to be seamlessly deployed and integrated in to any website or mobile app and has never been constrained to the IAB’s view of the world. We think that consent is just one element of many that goes in to delivering positive and trustworthy customer experiences. For that reason and to prepare for the future, we embrace and contribute to emerging standards, like the Kantara Initiative Consent Receipt Specification.
Standards are important, as they ensure you strive for excellence and embed interoperability into your design thinking. So, whilst we leave the IAB TCF, we are still standards compliant as we adopt fully the Kantara Consent Receipt Specification.”
About Consentua
Consentua is the world leading consent management platform - making it easy to do the right thing, helping data controllers to be trustworthy and supporting individuals to have choice and control.
Partially funded by InnovateUK, Consentua is part of the KnowNow Information product portfolio and was conceptualised back in 2015 as part of the Cognicity Challenge - Canary Wharf Group’s Smart City Accelerator. The smart city app caught the audience’s imagination by giving people choice and control over the sharing of their personal data.
Ends
15 May 2019
TL;DR - By improving trust between you and your customers they will be happier to spend more with you.
I’m amazed how often I’m asked “why does anyone need consent management? Aren’t there other, more applicable legal bases for the processing of personal data?”
In many cases this is true. Consent should often be used as the basis of last resort. However, when no other legal basis is available; there is no legitimate interest or regulatory need for data processing, for example; consent is often the only way forward.
Consent is still required
The experience of working with government agencies, large enterprises and smaller start-ups is that consent is still required in many circumstances.
One example would be within the workplace. Commercial organisations are often able to rely on a contractual basis for the use and retention of personal information. For example, the activities required to ensure safety of their site or their employees are not applicable to GDPR. Employers do, however, carry out many activities that are considered non-essential, such as the use of their staff’s images in marketing their company.
Most of the employers that our partners have worked with have, through their Privacy Impact Assessment, identified dozens of cases where consent may be the best legal basis.
So what does consent management software actually do?
Consent management increases trust by providing choice and control.
A consent management tool enables an organisation to record the consent interactions that they have with their customers, employees and users. It allows those customers, employees and users to choose what they consent to, what purposes they accept and to control access to their personal data.
We all see consent slips on the bottom of contracts, at the t’s and c’s page of a website or even on the request slip for a child to attend trips with their school. There are some occasions where these consent requests are inappropriate. If you don’t have any real choice about whether you should consent, for example, then consent should not be used as the legal basis for data processing.
Consent receipts and interoperability
Once the purposes for the consent requests have been defined by the organisation, the customer can make an informed decision whether to grant consent. Ideally, that consent is then recorded and a consent receipt is issued that is standards-based and interoperable with other consent systems. One such set of standards has been proposed by the Kantara Initiative.
The record of consent is then able to be queried whenever that personal information is used. This means that the customer experience is improved and trust is created between the organisation and the customer.
It is this increase in trust that was designed to be the key benefit of GDPR. There is evidence that a lack of trust in use of personal data severely affects revenues and/or service levels. Maintaining or even improving this trust should have a positive effect on organisations.
How can I prepare to deploy consent management software?
Your organisation will likely conduct a privacy impact assessment (PIA). This can be completed in conjunction with your data protection officer, or by using a consultant data privacy expert. It enables you to identify the personal information requirements and the appropriate legal basis for recording or processing that information.
If consent is one of the bases you will use then the PIA should identify the consent requests you will need to make. You need to clearly define your data types & ensure that the purposes are clearly defined. This is your consent request.
Together, the consent requests and the purposes for making the requests are pre-requisites for a successful adoption of consent management software. You may also want to think about where in your customer’s interactions you will be asking for consent. Will you need to integrate with other 3rd party software?
For example, if you use a CRM system to manage your customer data, do you need that system to query whether you can record certain information about your customer? Do you need to consult the consent record before sending out marketing material?
Don’t forget you are creating a new a dataset. Consent management is part and parcel of your overall data lifecycle management.
If this article relates to your own situation, why not look at our own consent management software, Consentua. It is available now and ready to be deployed for your organisation today.
Send me an email at [email protected] if you want to see how Consentua can help you to improve trust with your customers.
