How can the data processor who collect personal information using an online form prove that the person who entered her data gave active consent, for instance by clicking a checkmark?
Imagine a a registration form, where the user enter her information, and those are sent to and stored in a database.
The data processor can see that the bit of data corresponding to the opt-in is there (e.g. the value in column
consent in the table
TRUE for the given entry). But how to tell if that is there because the user actually performed some kind of actions or not?
Using only the information in the database, that is technically not provable. Or am I missing something?