Show a consent gate modal that stays up until a logged-in member accepts your required consents (data processing, marketing, etc.). When they save, it records the exact acceptance timestamp, the consent version, and an append-only audit history in Member JSON — so you have a defensible record of who consented to what, and when.