consent_events

source

A receipt for every "yes" and "no" customers gave us.

Definition

Append-only consent ledger — one row per (customer × purpose) state change. The lawful-basis gate: any query touching personal data for a given purpose must check the latest event here before processing. Withdrawals never delete history; they add a new event_type='withdrawn' row instead.

9 of 9

Column

Description

Tests · PII

consent_event_id

Primary key — BIGSERIAL on the source.

2 tests

customer_id

FK to customers.customer_id. NOT NULL.

customer +18 PII1 test

purpose

Processing purpose — one of the project-wide closed list (see governance/CLASSIFICATION.md).

1 test

basis

Lawful basis under GDPR Art. 6.

1 test

event_type

granted | withdrawn | expired.

1 test

source

Where the consent state change was captured (form, settings page, import, system).

captured_at

Time the state change occurred (TIMESTAMPTZ).

expires_at

Optional expiry timestamp. NULL = no scheduled expiry.

created_at

Row insert timestamp.