Progressive Digital Consent

Handling sensitive personal data such as medical records and personal addresses requires explicit, documented consent from the peer mentor who will receive and act on that data. Blindeforbundet currently manages this through paper-based processes (powers of attorney, manual records) that are difficult to audit and impossible to scale. Progressive digital consent replaces these with an in-app, time-stamped audit record linked directly to each assignment, creating a defensible GDPR-compliant trail. The progressive model minimizes friction by prompting only when needed, while the manual fallback supports the phased digitalization strategy explicitly agreed across all organizations.

Consent records are stored server-side as immutable audit entries capturing peer_mentor_id, assignment_type, timestamp, scope, and method (digital or manual). The Flutter UI presents a bottom sheet at first encounter with a new sensitive assignment type, written in plain language. Once granted, subsequent assignments of the same type proceed without re-prompting unless scope changes. Coordinators can set a manual fallback flag in the admin portal, which generates a paper reference number linked to the digital record. Consent withdrawal must immediately block further dispatch of that assignment type and propagate without requiring a new app session.