Somewhere in the discovery for an export credit programme, a relationship manager said something that reorganised the whole project. I had asked how she knew whether she was allowed to contact an exporter. She said: “You learn the rules. Nothing stops you breaking them.”
She was not describing a gap in training. She had been trained thoroughly, could recite the obligations, and had never knowingly broken one. What she was describing is that the safe path and the easy path had been allowed to diverge, and the system was silent about which one she was on.
Compliance held by memory is compliance held by the most tired person on the team, at 4pm on a Friday.
This is the shape of the problem almost everywhere. Consent is captured once, on a form, at the start of a relationship. It is recorded somewhere it can be audited. And then it is never surfaced again at any of the hundred moments when it actually governs what someone is about to do.
State, not paperwork
The fix is not more training, and it is certainly not another modal. Consent is a state: express, implied, expired, exempt, unknown. Like any state it belongs where the action is. On the record. Next to the contact button. Visible before the form is filled in rather than after.
That last detail matters more than it sounds. Putting the block after the effort is a small cruelty that teaches people to resent the control, and people route around controls they resent. Putting it beside the form costs nothing and reframes it as information rather than obstruction.
There is a version of this argument that sounds like designers volunteering to do the legal team's job. It is the opposite. Legal decides what the obligation is. Our job is to make the obligation legible at the moment of action, so that following it requires no memory and no virtue.
What it buys you
Three things, in my experience. Nobody has to remember. The audit trail becomes a by-product of ordinary use rather than a separate chore. And the compliance team stops being the department of no, because the thing they were worried about is now structurally impossible rather than merely discouraged.
The uncomfortable part is that this only works if you are willing to block. A warning that can be clicked through is decoration. If the state says you may not contact this person, the button has to be unavailable, and there has to be an obvious, dignified way to change the state, capture consent or record an exemption, right there.
Designers are trained to remove friction. This is the case for putting some back, precisely and once, at the only point where it does any good.