Configuring Double Opt-In for a Collection Point

Double Opt-In is a two-step opt-in process where two actions are required before consent can be confirmed. When double opt-in is enabled on a Collection Point and the first action on a Purpose is submitted, the Purpose Status will be set to PENDING. The data subject will then need to complete the second step of the double opt-in process by clicking the received confirmation link to confirm their consent. Once the data subject confirms his or her consent, the Purpose Status will change to ACTIVE.

Note:

The confirmation link in the Double Opt-In email will expire and become invalid if any other type of transaction occurs before the user confirms their consent via the DOI process.

You can configure how double opt-in confirmation links are sent to data subjects by selecting one of the following configurations:

To configure the default double opt-in workflow

You can use the default double opt-in workflow to confirm a data subject's consent. Using the default double opt-in workflow will not require any additional configuration within the Integrations module.

  1. On the Universal Consent & Preference Management menu, select Interfaces > Collection Points. The Collection Points screen appears.

  2. Click the link in the Name column for a Web Form or Custom API type Collection Point. The Collection Point Details screen appears.

  3. On the Details tab, verify that Email is selected in the Data Subject Identifier field.


  4. Navigate to the Settings tab, and enable the Double Opt-In setting. Additional fields become available.
  5. Verify that the Send Confirmation Email setting is enabled.


  6. Click the Save button.

Double Opt-In Settings Reference

The following settings on the Preference Center Settings tab are relevant to the double opt-in workflow. Some settings may only be available if a certain type of data subject identifier is set for the Collection Point.

Field
Description
Double Opt-In

Enable this setting to utilize two-step opt-in for consent.

Redirect URL

Enter the URL where the data subject should be redirected after confirming or canceling consent by clicking the received link in the Double Opt-In Confirmation email message.

Include Redirect URL Parameters

Enable this setting to include language and consent parameters within the Redirect URL in order to redirect data subjects to a page that reflects their selected language and consent preference.

Note:

This setting appears only after a valid URL has been entered into the Redirect URL field.

Include Cancel Option in Confirmation Messages

Enable this setting to include an option for data subjects to cancel the Pending status for the Purpose(s) within the Double Opt-In Confirmation email message. The status of the Purpose(s) will then be updated to Not Given.

Reconfirm for Active Data Subjects

When enabled, this setting will trigger a confirmation email for existing data subjects that submit consent for already Active purposes.

Note:

The logo displaying on the confirmation email is pulled from the logo uploaded in the Sign-in Page section on the following menu: Global Settings > Email and Branding > Application branding.

  • Recommended ratio is 7:3

  • Default dimensions are 300 x 53px

  • Maximum dimensions are 350 x 150px

Send Confirmation Email

If Email is selected as the data subject identifier for the Collection Point, this setting is enabled by default, but can be disabled to configure a custom double opt-in workflow while retaining the email data subject identifier. However, if a non-email data subject identifier such as Mobile is selected, this field will be disabled and unavailable.

Enable Collection Point Events

When enabled, this setting will trigger an event when a consent update occurs from this Collection Point. Additional configuration steps will be required in the Integrations module.

This setting is automatically enabled when any of the following conditions are met:

  • You select a non-email data subject identifier for the Collection Point configuration, such as Mobile.

  • You disable the Send Confirmation Email setting.

Single Data Subject Update Event Type

This setting is automatically enabled when any of the following conditions are met:

  • You select a non-email data subject identifier for the Collection Point configuration, such as Mobile.

  • You disable the Send Confirmation Email setting.

To configure a custom double opt-in workflow

You can configure a custom double opt-in workflow with the Integrations module to send confirmation links to a data subject's email address.

Note:

The Enable Consent Update Events setting within Global Settings must be enabled to configure a custom double opt-in workflow. For more information, see Universal Consent & Preference Management Settings.

  1. On the Universal Consent & Preference Management menu, select Interfaces > Collection Points. The Collection Points screen appears.

  2. Click the link in the Name column for a Web Form or API type Collection Point. The Collection Point Details screen appears.

  3. On the Details tab, verify that Email is selected in the Data Subject Identifier field.


  4. Navigate to the Settings tab, and enable the Double Opt-In setting. Additional fields become available.
  5. Disable the Send Confirmation Email setting. The Enable Collection Point Events and Single Data Subject Update Event Type settings are automatically enabled.
    Note:

    Events are required to ensure that when a data subject interacts with the Collection Point, an event of the data subject update type will be sent to the Integrations module. The event will contain the information you need to build custom double opt-in workflows and will include the double opt-in confirmation link.



  6. Click the Save button.
  7. Navigate to the Integrations module to configure your custom workflow.

To configure a double opt-in workflow without email identifiers

You can also use double opt-in workflows for non-email identifiers and configure how the double opt-in confirmation link is sent yourself. Rather than sending the double opt-in confirmation link through email using the procedure above, you can use integration events instead to build custom workflows. You can then send the double opt-in confirmation link via any other communication channel based on your organization's needs.

Note:

The Enable Consent Update Events setting within Global Settings must be enabled to configure a double opt-in workflow without email identifiers. For more information, see Universal Consent & Preference Management Settings.

  1. On the Universal Consent & Preference Management menu, select Interfaces > Collection Points. The Collection Points screen appears.

  2. Click the link in the Name column for a Web Form or API type Collection Point. The Collection Point Details screen appears.

  3. On the Details tab, select a non-email data subject identifier in the Data Subject Identifier field.


  4. Navigate to the Settings tab, and enable the Double Opt-In setting. Additional fields become available.
  5. By default, the Send Confirmation Email setting will be disabled and unavailable. In addition, the Enable Collection Point Events and Single Data Subject Update Event Type settings will be automatically enabled and cannot be changed.
    Note:

    Events are required to ensure that when a data subject interacts with the Collection Point, an event of the data subject update type will be sent to the Integrations module. The event will contain the information you need to build custom double opt-in workflows and will include the double opt-in confirmation link.



  6. Click the Save button.
  7. Navigate to the Integrations module to configure your custom workflow.