ConsentRecords
What each person has consented to, on what legal basis, and when they withdrew it.
Record a consent decision
Records that a data subject granted or refused a specific use of their data, under a stated lawful basis. The basis matters later: a consent-based record can be withdrawn, while one held under a legal obligation cannot. Requires `consent-record.create`.
List consent records
Returns consent records, filterable by subject and type. Requires `consent-record.read`.
Get a consent record
Returns one consent record with its lawful basis and current state. Requires `consent-record.read`.
Update a consent record
Amends a consent record — for a correction to what was captured, not for revocation. Withdrawing consent is a separate call, because it is a legal act with its own effects on the records the consent covered. Requires `consent-record.update`.
Delete a consent record
Soft-deletes a consent record. Requires `consent-record.delete`.
Withdraw consent
Withdraws a consent the subject previously gave, as the right to withdraw requires. Only a record held under consent can be withdrawn — one held under a legal obligation or a contract is refused, because withdrawal is not the mechanism that ends those. Requires `consent-record.update`.