Beyond the button: Consent as a regulatory entry point


Contributors:
Joanne Furtsch
CIPP/C, CIPP/US, CIPT, FIP
VP, Privacy Knowledge
TrustArc
Val Ilchenko
General Counsel, Chief Privacy Officer
TrustArc
Scott Lashway
Partner, Co-Chair, Privacy and Cybersecurity Practice
Mintz
Brought to you by TrustArc
Broadcast date: 28 April 2026
Time: 08:00–09:00 PST, 11:00–12:00 EST, 16:00–17:00 CET
California regulators are raising the bar on what it truly means to honor consumer opt-out rights. Posting a “Do Not Sell or Share” link is no longer enough. Organizations must be able to demonstrate that preferences are captured accurately, propagated across systems, and consistently enforced.
Recent regulatory spot checks show that consent is increasingly being used as a catalyst for broader investigations. What starts as a review of an opt-out mechanism can quickly expand into scrutiny of data flows, vendor sharing, governance controls, and documentation. In many cases, consent becomes the tip of the spear - exposing deeper operational gaps.
Key takeaways:
- How regulators are evaluating opt-out and consent mechanisms.
- Common operational breakdowns in capturing and enforcing preferences.
- Why consent management is now a frontline enforcement trigger.
- Practical steps to strengthen end-to-end opt-out governance.
- How to move from “button compliance” to defensible operational control.
This session is designed for privacy leaders who want to ensure their opt-out processes stand up to real regulatory scrutiny, not just surface-level review.
If you registered for this sponsored web conference and subsequent related follow-up emails, you submit your registration information to the IAPP and the co-host and sponsor for that particular web conference, which includes attendee names, titles, organizations, countries, state and email addresses.
This web conference is co-hosted and sponsored by TrustArcand free of charge to you. The IAPP and the sponsor will use your registration information each in compliance with its own privacy notices.
If you do not wish to submit your information to the web conference sponsor(s), you should not sign up for this free, live web conference. You can access the recording of the web conference without providing information to sponsors.
The co-sponsor's privacy notice is available here: TrustArc Privacy Notice
You may contact the sponsor directly in order to express your preferences with regard to direct marketing communication at privacy@trustarc.com
You may also contact the IAPP’s data privacy officer at privacy@iapp.org with any questions about the IAPP's processing of personal information or the IAPP's privacy notice.
Eligible CPEs: AIGP, CIPP/A, CIPP/C, CIPP/E, CIPP/US, CIPM and CIPT.
1.0 CPE credits