Consent Artifact Schema
The Consent Artifact v2 is the upgraded standard of the Consent Foundation’s verifiable consent record format. It captures the entire lifecycle of consent — from agreement metadata to audit trail — ensuring immutability, traceability, and cryptographic verification in compliance with the Digital Personal Data Protection Act (DPDPA), 2023.
Artifact Context
context
URL defining schema and artifact specification.
https://consent.foundation/artifact/v1
version
Artifact schema version.
2
Agreement Metadata
agreement_id
Unique identifier of the consent agreement.
c750b6ae-5475-4f5b-8324-5692e191bfb1
agreement_hash_id
Cryptographic hash of the agreement content.
1ee0766a489dd4415b2f1064e4f07cc21d21b84888173d399c163471f380c5de
linked_agreement_hash
Optional previous or related agreement hash (for version chaining).
(null or previous hash)
agreement_version
Version number of this agreement.
1
cp_id
Consent Purpose ID.
6938086d9cac5e4938546524
cp_name
Consent purpose name.
Job Application
Data Principal
dp_id
Unique system identifier for the data principal.
b481b0ff-8ce1-4d42-8f12-a295a2a84dfc
dp_df_id
Internal reference or linked system ID.
SYS2590777
dp_residency
Residency of the data principal.
india
dp_e
Encrypted identifier for data principal.
b59144cc04343280fb9fe409f29a54853aee6de5dbc868cb31c55308b9fb21da
dp_m
Masked identifier for privacy-preserving linkage.
5071b309920c0cde038d84a351a916fdc086535168de7fd89ef22c682a7ea5dd
dp_verification
Whether the principal’s identity has been verified.
true
dp_child
Indicates if data principal is a child.
false
Parental & Attorney Information
Both sections are included for minors or delegated consents; otherwise remain blank.
dp_parental
Parent/guardian identification metadata.
null
dp_attorney
Authorized attorney information if applicable.
null
Data Fiduciary
df_id
Unique identifier for the Data Fiduciary.
9f091721-24fc-4f70-9770-c2e9f5623573
agreement_date
Timestamp when agreement was made.
2025-12-09T17:25:29.694567Z
Consent Scope
Each artifact contains one or more data elements, each linked to one or more consent purposes.
Example: Data Element — Email Address
de_id
Unique ID for the data element.
692924bcbe4dafd9c9b4409f
de_hash_id
Hash of the data element (for immutability).
0xf31ac149b9f9c6495fb115e0374ac75813665ada57610cd8b3cf358fcede6d93
title
Human-readable name.
Email Address
data_retention_period
Date until which data is retained.
2028-12-08T17:25:29.612789Z
de_status
Current lifecycle status.
active
Associated Consent Record
purpose_id
Linked consent purpose.
6929313f780a509f14ce1f88
purpose_title
Description of purpose.
To identify you and create/manage your account
consent_status
Current consent status.
approved
consent_mode
Mode of consent collection (e.g., STORE, SHARE, etc.).
STORE
consent_timestamp
Time of consent capture.
2025-12-09T17:25:29.642183Z
consent_expiry_period
Expiration timestamp.
2028-12-08T17:25:29.642183Z
retention_timestamp
Data retention expiration.
2028-12-08T17:25:29.612789Z
shared
Whether shared externally.
false
cross_border
Indicates if data is transferred outside India.
false
is_legal_mandatory
Whether collection is legally mandated.
false
is_service_mandatory
Whether required for service functionality.
false
reconsent
Whether re-consent is required.
false
Metadata & Request Context
timestamp
System time when artifact was logged.
2025-12-09T11:55:29.695198Z
ip_address
IP address from which consent was submitted.
127.0.0.1
request_header_hash
SHA-512 hash of full request headers (ensures integrity).
29cb1038a4e57e6fdf109cf8b5f3e08787e48a3c9c5e619b1e6ad730ad7fc7abb7c77d7869c0e209d6b736c86d052a9c21a4d4d9073b116d500b43a852e5c083
request_header
Original request headers (optional for audit recovery).
(stored inline or off-chain reference)
Audit Trail & Hash Chain
operation
Action recorded (insert, update, revoke).
insert
data_hash
Hash of the artifact body.
9d54a7e7de6cdc64c3de8550457a24dce55104e4588d03f68b421ac9d4b54bdb
prev_record_hash
Previous audit record (for chaining).
null
record_hash
Current record hash for blockchain-style chaining.
527e0e51a9f1b0680d68ae7a0839eed770613f30ffbe010a522813839df4f8e5
signature
Digital signature of record.
MEQCICcM7cP1PCgjffFMam9cfUwIOrgv/O+1TxVpjZ2ikBrwAiBgHoOrifed34nFt+LiLNLWGoqcmjtvKTbxLMWbjThOkg==
signed_with_key_id
Identifier for signing key used.
cm-key-2025-01
is_legacy
Indicates if record conforms to older schema.
false
Last updated