← Check catalogue
WA-MHMD-CONSENTBoundedlegally required
Consent before health data is collected, not after
What the source requires
Consent must be obtained before any consumer health data is collected or shared, and the request must disclose the categories collected, the purpose, who it is shared with, and how to withdraw.
Why this is hard to satisfy
Advertising pixels on a treatment page fire on load. The page a visitor reads about a procedure is itself the health data, and the tracker has already sent it before anyone has been asked anything.
What we do about it
Tags are held until consent is recorded, and what was disclosed at the moment of consent is kept with it.
In build · phase two
What this tier means
Formal reasoning over a bounded policy. Sound only for what the policy models, so we say “checked against”, never “guaranteed”.