Opt-in to give consent

Notifying the user of data collection and asking them to consent to it.

We have a responsibility to ask users for consent when we want to collect, store, or use their data especially personal information.

This pattern asks the user to:

• read a summarized privacy notice
• confirm that they clearly understand and freely agree to how their data will be collected and used

When to use this pattern

Use this pattern when:

• privacy notices (statements, terms of use, etc.) are required. For example, signing up for a new service or storing data in cookies
• you are required by law to record when and how consent is given. This includes the version of a privacy notice the user agreed to
• the user understands what data is collected, where it is stored, what it is used for, and for how long
• the user is able to opt-out, correct, or delete their data at any time

When not to use this pattern

Don’t use this pattern when:

• the type of data collected, where it is stored, what it is used for, and for how long, is unspecified or will change often
• the user cannot see or access the other data that organization collects and its purposes or uses
• there isn’t a clear process for the user to opt-out, correct, or delete their data at any time

How this pattern works

When you collect a user’s data, make sure the following are present, easy to find, read, and use.

Privacy statement

A summarized privacy statement highlighting the type(s) of data collection, storage, and use, with links to the full statement. Be sure to use proper heading levels, typically a h2 is used.

<h2>Privacy policy</h2>
<p>Your information <strong>will not</strong> be used for any decision-making process that affects your access to Government of Canada services. Your personal information <strong>will not</strong> be used for any administrative purposes.</p>
<p>Your personal information and feedback are confidential.</p>
<p>Your information <strong>will</strong> be used by Employment and Social Development Canada for ...</p>
<h3>What we will collect</h3>
<p>We need the following information so we can ...:</p>
<ul>
    <li>Email address</li>
    <li>...</li>
</ul>
<p>You can also choose to share more information with us so we can ...:</p>
<ul>
    <li>Province or territory</li>
    <li>...</li>
</ul>
<p>We collect this information to ensure our research groups are diverse, and to identify trends in feedback for specific groups.</p>
<p><a href="https://www.canada.ca/en/transparency/privacy.html">Read the full privacy policy.</a></p>

Opt-out description

A brief description of how to opt-out, correct, or delete their data later. The section should start with the same level heading as the Privacy statement, typically a h2.

<h2>How to unsubscribe from ...</h2>
<p>If you have previously signed up to become a participant and no longer wish to be contacted for future ..., you can <a href="#unsubscribe">unsubscribe</a> yourself from the participant list and we will remove your personal information.</p>

Affirmative action

An affirmative action the user can take to opt-in by agreeing to the privacy statement (for example, a checkbox that isn’t pre-selected).

<div class="checkbox-inline">
    <label for="consent" class="required">
        <input type="checkbox" id="consent" name="consent" value="consent">
        <strong>I have read, understood and agree to the above. I affirm that I am 18 years old, or older. I understand that I can withdraw from this ... at any time without consequence.</strong>
    </label>
</div>

Research and impacts

Coming soon

Related patterns and components

• Privacy Disclaimer (Canada.ca Design System)
• Privacy Statements Generator (Canadian Digital Service)

Recent changes

• 2021-07-13 - Started development
• 2021-07-22 - Published first draft

All content of the Data Patterns Library is available under the Open Government Licence - Canada