RSK-4288 · Privacy
Consent flag not propagated to advisory copilot
Marketing-consent withdrawal is not read by the advisory context builder, so opted-out customers still receive product prompts.
high
Exposure score
12/25
likelihood 3 × impact 4
Remediation SLA
6 days
detected 2026-07-04 10:28
Accountable owner
DPO
named under the AI risk charter
Affected agent
Wealth Advisory Copilot
AGT-1056 · Wealth
Investigation
What the sweep found and how it was corroborated
Marketing-consent withdrawal is not read by the advisory context builder, so opted-out customers still receive product prompts.
Customers
612
Prompts generated
1,904
Complaints
3
Exposure position
Placed at likelihood 3, impact 4 on the enterprise 5×5 matrix.
Remediation plan
Tracked to closure
- Read consent at context build
- Suppress and re-train advisors
- DPDP notification assessment
Case metadata
- Risk ID
- RSK-4288
- Category
- Privacy
- Detected
- 2026-07-04 10:28
- Owner
- DPO
- SLA
- 6 days
- Agent record
- AGT-1056