In one regulated system I worked on, a marketing preference was not a soft business attribute. It was a control with direct compliance consequences.
We had two datastores that both claimed to hold the current answer for customer non-solicitation preferences. One was the privacy preference system where customers submitted opt-outs. The other was a core system consumed by downstream communication workflows. Both were usually right. That was the problem.