orejime_register
Orejime Register is a lightweight GDPR-compliance helper that stores user consent responses collected through the Orejime module.
This module was developed in accordance with Article 7.1 of the GDPR, which states that consent must be demonstrable by the data controller. The French Data Protection Authority (CNIL) has issued several practical recommendations to comply with this requirement. These recommendations may vary depending on your country, please refer to your local authority for guidance.
The CNIL outlines the following methods as valid ways to ensure consent traceability:
- Storing different versions of the consent mechanism code with a third party, or publishing a timestamped hash version to prove authenticity later.
- Capturing and timestamping screenshots of the consent interface displayed on mobile or desktop devices for each version of the site or application.
- Carrying out regular audits of the consent collection mechanisms by trusted third parties.
- Archiving the configuration history of consent collection tools (CMPs – Consent Management Platforms) in a timestamped manner.
Maintaining a register of individual consents is also acceptable, as long as it complies with standard data protection principles such as data minimization, appropriate retention periods, and secure storage.
Dependencies
This module requires the Orejime module.
Installation
- Install Orejime Register as you would any other Drupal module.
- There is no step 2!
Usage
No configuration is required. Orejime Register automatically stores each user's consent response in a dedicated database table.
You can access the data via the admin interface:
- View stored consents:
/admin/reports/orejime-register/list - Purge options: Full purge or purge by date
Credits
Maintainer: Mickael Bidinger
Sponsored by:
Feedback & Contributions
Issues and merge requests are welcome on the Drupal.org issue queue. Feedback and contributions are always appreciated!