Consent is revocable. That's the part systems fail. A user says "stop using my data" — now find every copy, every derived set, everywhere it flowed. Most stacks can't even list where it went. Could you prove one user's data stopped being used?