The Practice Note: How to manage consent—personal data sets out what you must record when relying on consent as the lawful ground for processing under the General Data Protection Regulation (GDPR), ie: What you must record What you will need Who consented The name of the individual, or other identifiers such as online user name and/or session ID. When they consented A copy of a dated document, or online records that include a timestamp.For oral consent, a contemporaneous note of the time and date, made at the time of the conversation. What the data subject was told at the time A master copy of the document or data capture form containing the relevant consent statement, along with any separate privacy policy, including version numbers and dates matching the date consent was given.For