New user registrations are not being tagged with GDPR consent flags, leading to incomplete compliance records. The registration form submits the consent flag but the API ignores it. Updating the API to persist consent fields will ensure auditability.