Under the new regulation, passed by the European Parliament in April 2016, arts organisations will need to keep detailed records of which of their customers have consented to be contacted with marketing information, when that consent was given, and what they were told would happen with their data.