I am not even sure how is this possible, so here I am. I have google analytics with anonymized IP on, my users can activate and deactivate google analytics cookies at any time.
BUT, on top of that, according to GDPR I would need to collect and store records that cookie consent from a particular user was obtained.
Because the IP is anonymized, I could not prove that the guy emailing me has actually provided consent as "user A" and "Mr XXX" are not associated on my records, whilst they are the same person.
Any ideas how to solve this puzzle?