'Say it, do it, prove it' for consent: Best practices for building a closed-loop consent and preference audit program at scale
Contributors:
Ian Wardell
Senior Privacy and Risk Engineer - Security
Ivan Tsarynny
CEO and Founder
Feroot Security
Brought to you by Feroot
Join Ian Wardell, Privacy & Risk, Reddit, and Ivan Tsarynny, CEO Feroot for this interactive webinar as they unpack why auditing CMP platforms at scale is operationally challenging (pages × properties × geographies × languages × consent states × vendor behaviors) and why sampling creates blind spots that can turn into regulatory and reputational exposure. Ian and Ivan will present a practical closed-loop audit model that verifies the full chain: policy → user experience → consent signal → downstream tracker/script firing → evidence → remediation → re-test.
Most organizations treat consent and preference (C&P) as a configuration exercise: deploy a CMP, set up rules by region, publish a banner, and assume the rest works. But real-world C&P programs fail in the gaps—between policy and implementation, between banner choice and runtime outcomes, and between “point-in-time checks” and the nonstop pace of website/app changes.
Attendees will learn how to measure program effectiveness beyond binary “banner present” checks, including how to track drift, detect vendor creep, validate multiple policies for multiple regulations, and produce defensible evidence that consent controls are working day after day—while amplifying the value of existing investments in CMP and privacy tooling.
'Say it, do it, prove it' for consent: Best practices for building a closed-loop consent and preference audit program at scale
This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.
Submit for CPEs
