Yes, using a consent form linked to the Contact and the Compliance Profile is a good approach, especially if you are moving from inferred/opt-out consent to explicit/opt-in consent.
I would recommend treating this as a new consent collection exercise rather than simply converting the existing opt-out records to opt-in. Existing inferred consent should not automatically be changed to expressed consent unless you have a valid basis for doing so.
A practical approach would be:
- Create a Customer Insights - Journeys form specifically for obtaining express consent.
- Link the form submission to the appropriate Compliance Profile.
- Configure the relevant purpose/topic as requiring explicit consent.
- Use the form to capture the person's affirmative opt-in.
- Make sure the submission is recorded against the correct contact and communication channel (email, SMS, etc.).
- Keep the existing opt-out/inferred-consent data intact for audit/history rather than overwriting it.
Since these communications are now being treated as commercial communications, I would also recommend reviewing the compliance profile, purposes and topics before launching the consent campaign. Make sure the consent model is configured consistently with your organization's legal/compliance requirements.
For an existing membership database, you could run a targeted journey to contacts who need to transition to expressed consent and direct them to the consent form. Once they actively opt in, Customer Insights - Journeys can use that expressed consent for subsequent communications.
So yes — a dedicated consent form feeding the appropriate Compliance Profile/purpose/topic is generally a cleaner and more auditable approach than trying to bulk-convert inferred consent into opt-in.
