This page covers 90-day notifications as per rule 4.20 (and 4.20U for CDR representatives) and the associated consumer experience data standards.

<aside> <img src="/icons/info-alternate_gray.svg" alt="/icons/info-alternate_gray.svg" width="40px" />

This page outlines requirements that take effect on 14 July 2025.

The existing requirements regarding notifications about current consents will continue to apply until the relevant CX standards are made and in effect, as per the transitional provision outlined in CDR Rule 504 (and 507 for CDR representatives).

Data recipients should refer to the CDR Rules as they were in effect from 22 July 2023 to 11 November 2024 for details of their obligations with regards to notifications about current consents until this date.

</aside>

<aside>

Overview

The CDR Rules require, where a collection, use or disclosure is current, but 90 days have passed since the CDR consumer either gave or amended the consent, used their consumer dashboard or received a notification under the same rule, the consumer to be notified by the data recipient that the consent is still current.

Where circumstances apply to more than one current consent, a data recipient can give the consumer a single notification setting out all the current consents. In other words, a separate notification does not need to be given for each consent. The notifications must be given in accordance with the consumer experience data standards.

Consumers must be notified that their consent is still active if 90 days have passed since they last gave or amended consent, used their dashboard, or received a similar notification.

Consumers must be notified that their consent is still active if 90 days have passed since they last gave or amended consent, used their dashboard, or received a similar notification.


Wireframes and guidelines

<aside> <img src="/icons/info-alternate_gray.svg" alt="/icons/info-alternate_gray.svg" width="40px" />

Note: The wireframes shown are examples of how to implement key rules, standards, and guidelines. Use the on-screen functions to adjust zoom level or expand the wireframes to be viewed at full screen.

</aside>

The following wireframes show 90-day notification examples across different delivery methods — email, SMS, and push notification. It also cover two scenarios:

https://embed.figma.com/design/lCee6Os2Bd87SdzcP7gGy4/4CM4.-90-day-notification-v1.33.0.2025.02.27?node-id=14604-2134&t=Fl3wLPFwC9OYQfTf-1&embed-host=notion&footer=false&theme=system