Design consent as a continuous capability.
Allow users to review, modify, and revoke consent at any time.
Contents 7. Trust, Safety & Responsibility 1. Consent & Control
Who decides and when.
First, ask yourself
“Do users of your system retain control over actions affecting them or their data?”
Mission statement
Ensure users retain agency by enabling informed choices and control over permissions.
Key heuristics Consent & Control
- Consent must remain reviewable, modifiable, and revocable at any time.
- User controls must produce meaningful system change.
- The scope of consent must be clearly defined.
- Users must be able to revoke consent without harm or friction.
- Automated processes must remain subject to user interruption.
- Control mechanisms must scale with consequence severity.
- Consequential actions must require clear user acknowledgment.
- Consent must not be broadened without renewed permission.
- System behavior must consistently reflect granted permissions.
Executive brief
The system must preserve ongoing user control and earn trust through behavior.
Core questions Consent & Control
“Do users retain meaningful control? Does the system continuously respect it?”
“Can users grant, withdraw, and trust control at all times?”
Focus areas
Temporal-first
“Can users change their mind without penalty?”
“Does consent remain valid when context changes?”
Scope-aware
“What exactly have users agreed to? Where does it apply?”
“Does control align with consequence?”
Failure-aware
“What happens if control is unclear or contested?”
“Does the system default to restraint when uncertain?”
AI-aware
“Does automation remain subordinate to consent?”
“Is inferred intent treated as permission or authority?”
UX directives Consent & Control
Ensure user controls produce actual system change.
Do not offer settings that lack meaningful impact.
Make the scope of control explicit.
Define clearly what actions or data are governed by consent.
Enable simple and penalty-free withdrawal.
Ensure users can revoke participation without harm.
Keep automated processes interruptible.
Preserve user authority over automated actions.
Scale control mechanisms with risk levels.
Increase oversight and safeguards for high-consequence actions.
Do not allow implicit or overreaching defaults.
Require explicit user acknowledgment for consequential actions.
Preserve consent integrity across updates.
Do not broaden authority without renewed permission.
Enforce consent consistently in system behavior.
Ensure actions align with stated permissions at all times.
Executive summary
- Consent & Control is continuous user authority, not one-time permission.
- It ensures users can understand, modify, and revoke system power at any time.
- The system must make the scope and consequence of consent explicit and enforceable.
- Controls must produce real behavioral change and remain interruptible for automated processes.
- Oversight must scale with risk, and authority must never expand without renewed permission.
- Consent & Control succeeds when system behavior consistently aligns with user intent and granted authority.
Success indicators
- Users can clearly see what they are agreeing to.
- Users can review and change permissions at any time.
- System controls produce real and immediate changes.
- Users can withdraw consent without penalty.
- Automated actions remain interruptible and under user control.
One-line summary
Before users can trust a system, they must retain meaningful control over what it does on their behalf.