Consent Artifact v2

This page details about Consent Artifact, a structured record of user consent for data processing, with examples in XML , JSON, YAML, and TOML formats.

A Consent Artifact is a structured data object that encapsulates the detailed information about user consent for data processing activities. It is designed to provide a comprehensive and verifiable record of consent agreements, ensuring transparency, compliance, and accountability. You can find data fields definitions at Artifact Glossary Below is an example of a Consent Artifact in JSON format:

XML Data Format

<ConsentAuditLog>
  <_id>69380e323912a8de131da4a5</_id>
  <dp_id>b481b0ff-8ce1-4d42-8f12-a295a2a84dfc</dp_id>
  <df_id>9f091721-24fc-4f70-9770-c2e9f5623573</df_id>
  <cp_id>6938086d9cac5e4938546524</cp_id>
  <agreement_id>c750b6ae-5475-4f5b-8324-5692e191bfb1</agreement_id>
  <timestamp>2025-12-09T11:55:29.695198+00:00</timestamp>

  <artifact>
    <context>https://consent.foundation/artifact/v1</context>
    <agreement_id>c750b6ae-5475-4f5b-8324-5692e191bfb1</agreement_id>
    <cp_id>6938086d9cac5e4938546524</cp_id>
    <cp_name>Job Application</cp_name>
    <agreement_version>1</agreement_version>

    <consent_language>
      <short_code>hin</short_code>
    </consent_language>

    <metadata>
      <ip_address>127.0.0.1</ip_address>
      <request_header_hash>
        29cb1038a4e57e6fdf109cf8b5f3e08787e48a3c9c5e619b1e6ad730ad7fc7abb7c77d7869c0e209d6b736c86d052a9c21a4d4d9073b116d500b43a852e5c083
      </request_header_hash>
    </metadata>

    <data_principal>
      <dp_id>b481b0ff-8ce1-4d42-8f12-a295a2a84dfc</dp_id>
      <dp_df_id>SYS2590777</dp_df_id>
      <dp_residency>india</dp_residency>
      <dp_e>b59144cc04343280fb9fe409f29a54853aee6de5dbc868cb31c55308b9fb21da</dp_e>
      <dp_m>5071b309920c0cde038d84a351a916fdc086535168de7fd89ef22c682a7ea5dd</dp_m>
      <dp_vt></dp_vt>
      <dp_verification>true</dp_verification>
      <dp_child>false</dp_child>

      <dp_parental>
        <dp_df_id></dp_df_id>
        <dp_public_key></dp_public_key>
        <dp_e></dp_e>
        <dp_m></dp_m>
        <dp_vt></dp_vt>
      </dp_parental>

      <dp_attorney>
        <dp_df_id></dp_df_id>
        <dp_public_key></dp_public_key>
        <dp_e></dp_e>
        <dp_m></dp_m>
        <dp_vt></dp_vt>
      </dp_attorney>
    </data_principal>

    <data_fiduciary>
      <df_id>9f091721-24fc-4f70-9770-c2e9f5623573</df_id>
      <agreement_date>2025-12-09T17:25:29.694567</agreement_date>
    </data_fiduciary>

    <consent_scope>
      <data_elements>
        <data_element>
          <de_id>692924bcbe4dafd9c9b4409f</de_id>
          <de_hash_id>0xf31ac149b9f9c6495fb115e0374ac75813665ada57610cd8b3cf358fcede6d93</de_hash_id>
          <title>Email Address</title>
          <data_retention_period>2028-12-08T17:25:29.612789</data_retention_period>
          <de_status>active</de_status>

          <consents>
            <consent>
              <purpose_id>6929313f780a509f14ce1f88</purpose_id>
              <purpose_hash_id>0x57377a367414b5a168c90d3bbcec2d0f0973dc57427484c3eb89b3b2fdad5025</purpose_hash_id>
              <purpose_title>To identify you and create/manage your account</purpose_title>
              <description>This is To identify you and create/manage your account</description>
              <consent_expiry_period>2028-12-08T17:25:29.642183</consent_expiry_period>
              <consent_status>approved</consent_status>
              <shared>false</shared>
              <consent_mode>STORE</consent_mode>
              <data_processors></data_processors>
              <cross_border>false</cross_border>
              <consent_timestamp>2025-12-09T17:25:29.642183</consent_timestamp>
              <retention_timestamp>2028-12-08T17:25:29.612789</retention_timestamp>
              <is_legal_mandatory>false</is_legal_mandatory>
              <legal_mandatory_message></legal_mandatory_message>
              <is_service_mandatory>false</is_service_mandatory>
              <service_mandatory_message></service_mandatory_message>
              <reconsent>false</reconsent>
            </consent>
          </consents>
        </data_element>

        <data_element>
          <de_id>6929250cbe4dafd9c9b440a0</de_id>
          <de_hash_id>0xa5badc335306e38d03d5bcb13a87c55ab48514665bfe6c8f105262e5f0ddc0b6</de_hash_id>
          <title>Mobile Number</title>
          <data_retention_period>2028-12-08T17:25:29.668346</data_retention_period>
          <de_status>active</de_status>

          <consents>
            <consent>
              <purpose_id>692931b3780a509f14ce1f89</purpose_id>
              <purpose_hash_id>0x56b6bdbbb874bd1f5cf7cc02cc57287ffa37ae1153cb716675f322a6f51abf3a</purpose_hash_id>
              <purpose_title>To verify your age and eligibility for certain services</purpose_title>
              <description>This is To verify your age and eligibility for certain services</description>
              <consent_expiry_period>2027-12-09T17:25:29.694567</consent_expiry_period>
              <consent_status>approved</consent_status>
              <shared>false</shared>
              <consent_mode>STORE</consent_mode>
              <data_processors></data_processors>
              <cross_border>false</cross_border>
              <consent_timestamp>2025-12-09T17:25:29.694567</consent_timestamp>
              <retention_timestamp>2028-12-08T17:25:29.668346</retention_timestamp>
              <is_legal_mandatory>false</is_legal_mandatory>
              <legal_mandatory_message></legal_mandatory_message>
              <is_service_mandatory>false</is_service_mandatory>
              <service_mandatory_message></service_mandatory_message>
              <reconsent>false</reconsent>
            </consent>
          </consents>
        </data_element>
      </data_elements>
    </consent_scope>
  </artifact>

  <request_header>
    <host>localhost:8001</host>
    <connection>keep-alive</connection>
    <content-length>682</content-length>
    <sec-ch-ua-platform>"Windows"</sec-ch-ua-platform>
    <user-agent>Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36</user-agent>
    <sec-ch-ua>"Google Chrome";v="143", "Chromium";v="143", "Not A(Brand";v="24"</sec-ch-ua>
    <content-type>application/json</content-type>
    <sec-ch-ua-mobile>?0</sec-ch-ua-mobile>
    <accept>/</accept>
    <origin>http://localhost:8001</origin>
    <sec-fetch-site>same-origin</sec-fetch-site>
    <sec-fetch-mode>cors</sec-fetch-mode>
    <sec-fetch-dest>empty</sec-fetch-dest>
    <referer>http://localhost:8001/api/v1/n/get-notice/…</referer>
    <accept-encoding>gzip, deflate, br, zstd</accept-encoding>
    <accept-language>en-US,en;q=0.9</accept-language>
    <cookie>ext_name=ojplmecpdpgccookcobabopnaifgidhf</cookie>
  </request_header>

  <agreement_hash_id>1ee0766a489dd4415b2f1064e4f07cc21d21b84888173d399c163471f380c5de</agreement_hash_id>
  <is_legacy>false</is_legacy>
  <version>1</version>
  <operation>insert</operation>
  <data_hash>9d54a7e7de6cdc64c3de8550457a24dce55104e4588d03f68b421ac9d4b54bdb</data_hash>
  <prev_record_hash xsi:nil="true" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" />
  <record_hash>527e0e51a9f1b0680d68ae7a0839eed770613f30ffbe010a522813839df4f8e5</record_hash>
  <signature>MEQCICcM7cP1PCgjffFMam9cfUwIOrgv/O+1TxVpjZ2ikBrwAiBgHoOrifed34nFt+LiLNLWGoqcmjtvKTbxLMWbjThOkg==</signature>
  <signed_with_key_id>cm-key-2025-01</signed_with_key_id>
</ConsentAuditLog>

Other Data Formats

Below are the examples of Consent Artifact with other data formats:

Last updated