3.1 The consent matrix
Different AI uses require different consents. The CIP consent matrix defines five distinct consent types:
AI training ingestion — CIP-Training-Consent: Granted authorises copying content into a training corpus.
Fine-tuning — Fine-tuning consent is separate from training consent and authorises using content for targeted model adaptation.
Inference / retrieval — CIP-Prompt-Use: Permitted authorises AI reading and referencing content in responses.
Style transfer — CIP-Style-Transfer: Permitted authorises AI learning and applying creative style.
Synthesis — CIP-Synthesis: Permitted authorises AI generating content using the work as source material.
Most creators seeking full protection should set CIP-Training-Ingestion: Prohibited and CIP-Fine-Tuning: Prohibited. Setting CIP-Prompt-Use: Permitted is generally reasonable — it allows AI assistants to reference your work in responses without training on it.
3.2 Temporal consent
Temporal consent is a time-limited authorisation. After the period expires, the consent lapses automatically. The AI company must either seek renewed consent or cease using the content.
3.3 Scope-limited consent
Scope-limited consent authorises a specific type or quantity of use rather than a general permission — non-commercial research only, one jurisdiction only, one named AI company only, a specific model version only. Any use outside the defined scope creates subsisting rights failure liability.
3.4 The TDM opt-out
The four-field combination required for a complete, legally supported TDM opt-out:
- CIP-TDM-Opt-Out: true
- CIP-TDM-Opt-Out-Scope: All-Content
- CIP-TDM-Jurisdiction: UK, EU, US
- CIP-Training-Ingestion: Prohibited
Under UK DUA Act 2025 and EU AI Act Article 53, a machine-readable opt-out creates a legally recognised basis to object to commercial training use. A TDM opt-out can be withdrawn for future use — update your cip.md and CDR to Not-Granted — but withdrawal does not retroactively authorise what has already been done.
Summary
Key Takeaways
- Consent must be machine-readable, specific, informed, and revocable
- Training and fine-tuning require separate consents — one does not cover the other
- Temporal consent automatically expires and requires renewal
- The four-field TDM opt-out combination is the minimum for a legally supported opt-out
- Withdrawal prevents future use but does not undo past training
Self-check
Check Your Understanding
- Which two AI use types require separate, distinct consents under the CIP framework?
- What happens when temporal consent expires?
- How many fields are required for a complete, legally supported TDM opt-out in cip.md?
- A creator declares a TDM opt-out today. An AI company trained on their work last year. Does the opt-out create liability for the past training?
- What is scope-limited consent?