Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsRecord consent as an auditable, purpose-specific choice—not a lone consent=true flag. Give visitors a clear way to accept or refuse, preserve what they saw and chose, and make privacy settings easy to revisit. When they withdraw, record the change and ensure the relevant website technologies and consent-based processing stop.
The details depend on where your visitors are and what your site does. This guide draws on UK Information Commissioner’s Office (ICO), European Data Protection Board (EDPB), European Commission, and French CNIL guidance. UK ICO consent guidance is under review following the Data (Use and Access) Act; check current UK guidance before implementation.
As an Amazon Associate I earn from qualifying purchases.
Decide whether consent is the right basis
Consent is appropriate only when a person can make a genuine choice, including saying no and changing their mind later without detriment. If a person cannot freely withdraw, that may indicate consent is not the appropriate legal basis for the processing, according to the EDPB consent guidelines.
Recommended Free Tools
Do not use a consent banner to disguise processing that is necessary or relies on another legal basis. Cookie and similar device-storage rules also require a separate assessment under the applicable jurisdiction’s rules, such as the UK’s PECR or the EU ePrivacy framework. National implementation differs.
Ask for a clear, specific choice
Explain who is asking for consent, what data or technologies are involved, why they are used, who receives the data, and how the person can withdraw. Keep the request distinct from general terms and use plain language. If purposes differ, offer separate choices rather than bundling them into one all-or-nothing control. The ICO guidance on obtaining, recording and managing consent and the EDPB guidelines describe the requirements for valid consent.
#1 Best Overall
- No more exposed information in unprotected notary journals. This product shields clients' confidential information from prying eyes. It allows the Notary Public to keep the journal open during the transaction, as NO prior client information is viewable.
- Shields clients' AND Notary Publics' confidential information
- GLBA and HIPAA require non-disclosure policies and procedures. Notary Privacy Guard is a compliance tool for the professional Notary Public.
- Decreases Notary Public's liability from exposing client information
- Journal column headers are printed on the Notary Privacy Guard, no having to peek underneath to complete the journal entry. Becomes part of the journal and also acts as a place marker.
- Require an affirmative action. Do not rely on pre-ticked boxes, silence, or the mere act of browsing.
- Make refusing a purpose a real option, not a hidden or obstructed one.
- Show the parties and purposes relevant to the choice, including recipients where applicable.
- Do not activate non-exempt cookies or similar technologies before required consent is obtained.
Not every cookie requires consent. The European Commission’s online privacy guidance gives behavioral advertising and social-plugin tracking as examples that require consent, while some uses needed to provide a service or transmit communications may be exempt. Assess each technology by its purpose and the law that applies; do not classify every cookie as either exempt or consent-requiring by name alone. The CNIL’s cookies and trackers guidance, dated 29 September 2020, provides France-specific guidance.
Keep evidence of what each person chose
A useful consent record connects a person’s action to the exact request and purposes presented at that time. The ICO’s practical checklist identifies these elements:
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Rank #2
- HEALTHCARE FORM: Under the HIPAA regulations, all healthcare providers are required to adopt certain policies and procedures to maintain the privacy of patients’ health information and provide patients with a written notice on how they may use or disclose their protected information. This attorney-approved HIPAA Patient Ack. of Receipt of Notice of Privacy Practices form satisfies all required HIPAA obligations by documenting compliance.
- MEDICAL FORM: This HIPAA privacy notice ack. form includes all HIPAA required elements that must be included in order to validate an acknowledgment sheet. It acknowledges that the patient has received a Notice of Privacy Practices from their healthcare provider.
- HIPAA: The patient acknowledgment form for receipt of HIPAA notice privacy practices acknowledges that the patient's information to be released to an authorized third party is under HIPAA compliance. Healthcare providers can provide this form to the patients for a clear and concise valid patient acknowledgment under HIPAA.
- PACKAGING/DIMENSIONS: The HIPAA medical form is sold in a pack of 200 sheets in English. Each white medical sheet with blue ink print measures 8-1/2” wide and 11” long.
- COMPLYRIGHT: At ComplyRight, our mission is to free employers from the burden of tracking and complying with the complex web of federal, state, and local employment laws. ComplyRight is the market leader in government compliant products such as tax forms, tax software, HR products and services, labor law solutions, and health insurance claim forms.
- Who: the person’s name or an appropriate identifier, such as an account name or session ID.
- When: a timestamp or other dated record of the choice.
- What they saw: the consent statement and relevant privacy information, with versions or dates matching the choice.
- How: the submitted action and method, linked to the version shown.
- Scope: the specific processing purposes covered, recorded with enough detail to distinguish separate choices.
- Withdrawal: whether the person later withdrew consent and when.
For example, a record that says only “consent provided” does not establish which person made the choice, what they agreed to, or what information was shown. An IP address and time linked only to the current live form may also fail to prove which version a visitor saw. A stronger record links an appropriate identifier and timestamp to the submitted choices and an archived copy or version of the relevant form and privacy information. The ICO says an appropriate cryptographic hash may help support the integrity of online consent records.
Keep evidence while relying on consent, protect it, and set a retention period suited to the purpose and applicable obligations. The ICO’s guidance on obtaining, recording and managing consent provides the record checklist and examples.
Rank #3
- This Notary Privacy Guard is specifically formatted for Modern Journal of Notarial Events notary journal.
- Navy Blue with Silver
Let visitors update their preferences
Make a persistent, accessible route—such as a “Privacy settings” link or preference dashboard—available after the initial choice. It should let people revisit each purpose and change their preferences without having to find the original banner again. The controls must be connected to the technologies and downstream uses they claim to govern.
Review choices when purposes, processing, or recipients change. If the new use falls outside what a person agreed to, obtain fresh consent before relying on it. A consent refresh interval depends on context; the ICO suggests considering two years if in doubt, but this is not a universal statutory expiry date. See the ICO’s guidance on managing consent over time.
Make withdrawal straightforward and act on it
Withdrawal must be at least as easy as giving consent. Article 7(3) of the UK GDPR, as reproduced in ICO guidance, states: “The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof. It shall be as easy to withdraw as to give consent.” The ICO says an accessible one-step process is appropriate and, where possible, the same channel used to obtain consent should be available for withdrawal.
Rank #4
- Convenient Documentation Storage - Makes it easy to comply with audits and regulations like 21 U.S.C. 827 (b), 21 U.S.C. 827 (c)-DEA, and 42 CFR 483.60-CMS
- All Your Documentation in One Place - Makes it easy to track things like intake and usage; keep your records together for DEA audits
- Controlled Substance Logging - Makes it easy to track drugs intake and expenditure; helps track things like loss and destruction
- High Page Count Makes Tracking Easy - Makes it easy to track prescriptions and narcotics during the entire retention period
- Great for Tracking - Schedule 2 intakes from the pharmacy, narcotic emergency drug kit usage, and the count of narcotic emergency drug kits at the beginning and end of each shift
When a person withdraws, record when it happened and apply the change to the relevant purposes. For consent-based UK cookie and storage-access technologies, the ICO says to stop using them and stop related personal-data processing, remove technologies already set where required, and notify third parties that received the data or relied on consent. The ICO interprets withdrawal as an erasure request for information about the user gathered under that consent. A narrowly scoped suppression record may be retained where justified for compliance; inform the user about that record and its basis.
Withdrawal does not undo processing that was lawful while consent was in force. It does mean you must not continue relying on that withdrawn consent for future processing. See the ICO’s guidance on withdrawal and consent records and its guidance on withdrawal for cookies and similar technologies.
Best Value
- The perfect product for busy offices, walk-in advising centers, call centers, and other high-traffic businesses
- Keep track of activities and follow-ups
- Includes columns for date, time, name of contact, phone number, subject, follow-up action required, initials of individual completing the log, and check box to signal completion
- Spiral bound at left
- 100 pages per book
Implement the consent workflow
- Map processing and technologies. List each purpose, the data or device technology involved, recipients, and the jurisdictional rules that apply. Decide whether consent is actually the appropriate basis.
- Design the choice. Write a clear request with separate controls for distinct purposes, a genuine refusal route, and an explanation of how to change or withdraw choices.
- Gate consent-dependent activity. Configure tags and other relevant technologies so they do not run before required consent is obtained. Test each purpose, not only the banner display.
- Store evidence. Save the person or suitable identifier, timestamp, submitted choice, purposes, method, and the exact text and privacy-information versions shown. Protect the record and set an appropriate retention period.
- Provide an ongoing settings route. Make privacy settings easy to find and ensure updates change the corresponding tags, cookies, vendor signals, and processing.
- Handle changes and withdrawals. Reassess consent when purposes or recipients change. On withdrawal, record it, stop the covered consent-based activity, take required steps for data and technologies already in use, and propagate the change to relevant third parties.
- Check the whole path. Verify that refusing, accepting, updating, and withdrawing each produce the expected behavior on the site and with relevant providers; retain evidence of the choices and resulting changes.
Choose a preference system that fits your controls
You can build a preference system in-house or use a consent management platform (CMP). A CMP is an implementation option, not a substitute for the website operator’s responsibility to present suitable choices, keep evidence, and make withdrawal work. The ICO says organizations may build or procure a CMP and should assess their relationship with its provider.
When evaluating either approach, check whether it can:
- Preserve the exact choice and the consent and privacy text versions shown.
- Offer purpose-level granularity and keep vendor or recipient disclosures current.
- Make preference changes and withdrawal easy to find and apply.
- Propagate updated choices to tags and relevant third parties.
- Support data export, security, retention, and audit evidence.
- Clearly allocate controller and processor responsibilities and document provider terms.
The ICO’s consent guidance discusses recordkeeping, ongoing management, and CMP arrangements.
Check the rules that apply to your audience
This article summarizes regulator guidance, not a single worldwide cookie rule. The ICO material is UK guidance and is expressly under review in relation to the Data (Use and Access) Act. The European Commission page says it was last checked on 5 August 2026, and CNIL’s cited cookies-and-trackers explainer is dated 29 September 2020. EU member-state implementation and national rules can differ; confirm current requirements for each jurisdiction where your site operates or targets users.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
