Perhaps it would be more appropriate for the EDPB to centrally track consent. For example: If example.com wishes to use Alice's private information in a way tha

Perhaps it would be more appropriate for the EDPB to centrally track consent. For example: If example.com wishes to use Alice's private information in a way that is protected under GDPR, they would request consent from Alice via an EDPB-managed service. To opt-in, Alice would use the EDPB-managed service to accept the request. This way, the EDPB would have full control over how such requests are presented to a person, and would have an auditable record of all requests issued/declined/accepted.