Updated March 6, 2024
These guidelines provide examples for how to implement accredited person disclosure consents.
On this page
An accredited person (AP) disclosure consent allows consumers to consent to an accredited data recipient disclosing their CDR data to another accredited person.
In accordance with CDR rules 4.7A and 4.7B, an AP disclosure consent occurs after the other data recipient* has obtained a collection and use consent from the consumer.
Under CDR Rule 4.3B, CDR representatives who hold the consumer’s CDR data as service data are able to request an AP disclosure consent from a consumer. They are also able to be the recipient of data disclosed under an AP disclosure consent, provided they have sought a relevant collection and use consent from the consumer.
This section caters to an array of scenarios that may extend to a chain of disclosure consents between data recipients, referred to as data recipient 1 (ADR1), data recipient 2 (ADR2), and data recipient 3 (ADR3).
** NB: For simplicity, the use of the terms 'data recipient' and 'Accredited data recipient (ADR)' in these guidelines refer to an ‘accredited person’ as defined by the rules, or a CDR representative, under CDR Rule 4.3B.*
A high level example of the relationship between the initial consent between data recipient 1 and a data holder, a consent for data recipient 2 to collect and use data from data recipient 1, and a consent to disclose data from data recipient 1 to data recipient 2.
<aside> <img src="/icons/info-alternate_gray.svg" alt="/icons/info-alternate_gray.svg" width="40px" /> Note: The wireframes shown are examples of how to implement key rules, standards, and guidelines. Use the on-screen functions to adjust zoom level or expand the wireframes to be viewed at full screen.
</aside>