{
  "id": "OPS-235",
  "slug": "ops-235",
  "title": "A spoken consent record must pin the script version that was read",
  "statement": "Every consent record must carry the version and effective date of the consent script read to the consumer.",
  "rationale": "Scripts get improved, and every improvement makes the previous wording unprovable unless the record says which one was in force. This is the verbal twin of the capture-of-experience field, and it is the difference between \"our script says X\" — which a regulator reads as what you say today — and \"this consumer heard version 3, effective 12 January\". Brands miss it because the script lives in a document nobody versions.",
  "layer": "OPERATIONAL",
  "layerSlug": "operational",
  "object": "campaign.message_flow + privacy policy",
  "severity": "HIGH",
  "detectability": [
    "AI_FORM"
  ],
  "failureClass": "RETRY_FIELD",
  "authorities": [
    "FTC",
    "CTIA",
    "practice"
  ],
  "applicability": {
    "consentMethods": [
      "verbal_live",
      "verbal_ivr",
      "pos"
    ]
  },
  "applicabilityText": "Applies when consent was collected by live verbal, IVR and point of sale.",
  "universal": false,
  "remediation": "Version the consent script, give each version an effective date, and store the version identifier on every consent taken while it was live. Done when you can pick any past consent and reproduce the exact words that consumer heard.",
  "example": "Verbal opt-ins store script_version: 2026-03-a (effective 2026-03-01) with the agent ID and call UCID.",
  "pitfalls": [
    "Attaching the current script to the registration proves what is read today. It is silent about the consents already taken, which are the ones a complaint will be about."
  ],
  "notes": "Registration-side twin: we judge whether the programme describes storing the field, never whether the stored record exists.",
  "phase": "approval",
  "automated": true,
  "url": "https://ekas.io/rules/10dlc/operational/ops-235/",
  "markdown": "https://ekas.io/rules/10dlc/operational/ops-235.md",
  "registry": "https://ekas.io/rules/10dlc/",
  "updated": "2026-07-25",
  "licence": "CC BY 4.0 — https://creativecommons.org/licenses/by/4.0/"
}