Beyond the button: Consent as a regulatory entry point


Contributors:
Joanne Furtsch
CIPP/C, CIPP/US, CIPT, FIP
VP, Privacy Knowledge
TrustArc
Val Ilchenko
General Counsel, Chief Privacy Officer
TrustArc
Scott Lashway
Partner, Co-Chair, Privacy and Cybersecurity Practice
Mintz
Brought to you by TrustArc
California regulators are raising the bar on what it truly means to honor consumer opt-out rights. Posting a "Do Not Sell or Share" link is no longer enough. Organizations must be able to demonstrate that preferences are captured accurately, propagated across systems and consistently enforced.
Recent regulatory spot checks show that consent is increasingly being used as a catalyst for broader investigations. What starts as a review of an opt-out mechanism can quickly expand into scrutiny of data flows, vendor sharing, governance controls and documentation. In many cases, consent becomes the tip of the spear — exposing deeper operational gaps.
Beyond the button: Consent as a regulatory entry point

This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.
Submit for CPEs