Keywords:  GDPR, CASL, Consent

There are six different legal bases for managing a data subject’s personal information.  One of the six bases is that you have received the data subject’s informed, granular Consent to do so. 

How does Vuture recommend that ContactEase clients store and manage Consent?  Here is a step by step guide to help you.

Step 1
Create a new Category called Consent Requested, and put all your contacts who need to give their Consent into this Category.  

This method has the advantage that not everybody on your database necessarily needs to go into this Category.  For example, your suppliers (who have a contract with you) and possibly your current clients (who also have a contract with you) could, perhaps, be left out of the Consent Requested Category.  It is up to you to decide what you need to do in order to comply with GDPR or CASL.

Step 2
Send a Vuture mailing, offering your contacts the opportunity to give their Consent on a Form.  It is not recommended that you make this the primary purpose of your mailing.  Instead, try adding a banner to an existing mailing, with a link to the Form.  

Step 3
As new people are added to the Category, use Send More to mail only the new people.

Step 4
The Form response, on Submit, adds people to one of two new sub-categories Consent Given or Consent Refused. (This works in the same way as inviting people to an event adds them to RSVP=Yes or RSVP=No).

Step 5

For subsequent mailings, remember to build a search to exclude people who are in the Consent Requested category who are not also in Consent Given.  

There is a downloadable document for this process, including images/screen shots, below.