DISPATCHES · Summit Cognitive

← All dispatches

StandingJuly 27, 20265 min read

Consent is not a checkbox

A checked box proves a ritual was performed. It does not prove that anyone understood, agreed, or could ever say what they agreed to.

Somewhere in nearly every consequential interaction there is a box, and the box gets checked, and from that moment forward the institution behaves as though something meaningful occurred. The person agreed. The terms were accepted. Consent was obtained. But look closely at what the checked box actually records and you find it is astonishingly thin: it records that, at a certain timestamp, a certain account caused a certain flag to flip from false to true. It does not record that anyone read the terms, or understood them, or had a real alternative to accepting them, or could tomorrow tell you what they consented to. The box captures the ritual of consent with perfect fidelity and captures the substance of consent not at all — and we have quietly agreed, as a civilization, to treat the ritual as though it were the substance.

This substitution is convenient for everyone administering it and corrosive for everyone subject to it. It is convenient because a boolean is cheap to store, easy to query, and trivial to produce in an audit: the box was checked, here is the timestamp, the matter is closed. It is corrosive because the whole moral weight of consent — the reason consent can transform an imposition into an agreement, a taking into a giving — rests on the person actually having agreed, and the boolean is precisely silent on whether they did. We have built an elaborate apparatus for recording the fact of consent while recording nothing about its reality, and then we lean on the recording as though it settled the question it was carefully designed not to ask.

The tell is what happens when consent is later disputed. Someone says: I never agreed to that. And the institution's entire answer is the box. It cannot show what the person was shown, because it did not keep that. It cannot show what they understood, because it never asked. It cannot show what the alternatives were, because there were none worth the name and none were recorded regardless. It can show only the flag — true, at a timestamp — which answers a question no one is asking. The dispute is about substance; the record contains only ritual; and so the record cannot resolve the dispute, only assert the ritual louder.

A record that proves the box was checked, and nothing about what checking it meant, is not evidence of consent. It is evidence that a form of consent was performed.

Why the ritual crowds out the substance

Real consent has structure. There is something being agreed to, described in terms the person can actually grasp. There is a reason it is being asked, which the person is entitled to know. There is a genuine option to decline, without which the agreement is coerced no matter how freely the box was clicked. And there is a moment of understanding — the person taking in what the agreement means for them. None of this structure survives compression into a boolean. The flag records the click and discards everything the click was supposed to signify, the way a receipt might record that money changed hands while saying nothing about what was bought or whether the buyer knew.

What makes this worse than mere thinness is that the ritual actively displaces the substance. Once an institution can produce the checked box on demand, it has everything it needs to defend itself, and so it stops investing in the harder thing — the comprehension, the real alternative, the record of what was actually disclosed. Why bother making the terms understandable when an incomprehensible click discharges the obligation exactly as well? The boolean is not a neutral summary of consent; it is a substitute that, once accepted as sufficient, removes the incentive to obtain the thing it stands in for. The ritual does not merely fail to capture the substance. It relieves anyone of the need to produce it.

And notice who bears the cost of this arrangement. The institution holds a clean record and a closed matter. The person holds an obligation they may not have understood, agreed to under conditions they could not decline, with no account of what they were shown that they could ever point to. The asymmetry is total: one party has a defensible artifact, the other has a vague memory against an authoritative flag. Consent was supposed to protect the person's standing — their capacity to say what they agreed to and to contest what they did not. The checkbox inverts it, converting consent from a shield the person holds into a document the institution holds against them.

What a consent worth the name would record

The remedy is not more elaborate consent theater — longer disclosures, more boxes, additional clicks — which only thickens the ritual while leaving the substance as absent as before. The remedy is to record the things that would let the agreement be contested: what was actually disclosed, in what form; what the person was told the purpose was; what the alternatives genuinely were; and enough of the surrounding state that a later reviewer could reconstruct not just that a box was checked but what checking it meant at that moment. A Decision Receipt for consent captures the agreement as a contestable record rather than a closed flag — an artifact that can answer the question what did I actually agree to instead of merely reasserting that something was agreed.

The measure of such a record is whether it strengthens the standing of the person who consented rather than the institution that collected the consent. A meaningful consent record is one the individual could later use — to see what they were shown, to challenge a claim about what they accepted, to establish that the thing now being done to them exceeds the thing they agreed to. This is the inversion that matters: the record exists to make the consent contestable, not merely producible. A consent you cannot contest is not consent you gave; it is consent that was recorded on your behalf, and the difference is the whole of it.

So the question to ask of any consent mechanism is not did they agree — the box will always say yes — but if they later say they didn't, what can this record actually show. If the answer is a timestamp and a flag, the mechanism recorded a ritual and called it agreement. Consent is not the click. Consent is the understanding the click was supposed to certify, and a record that keeps the click and loses the understanding has kept the ceremony and thrown away the thing the ceremony was for.

— Dispatches · Summit Cognitive

Continue from here

Turn the argument into a practice.

Get new dispatches, assess how your organization handles consequential decisions, or explore Summit Cognitive.