Updated November 9, 2023
These guidelines provide examples for how to implement amending consent scenarios.
On this page
In accordance with CDR Rule 4.12B(3), the accredited person may invite a CDR consumer to amend a current consent if:
(a) the amendment would better enable the accredited person to provide the goods or services referred to in paragraph 4.3(1)(a); or
(b) the amendment would: (i) be consequential to an agreement between the accredited person and the CDR consumer to modify those goods or services; and (ii) enable the accredited person to provide the modified goods or services.
Data recipients should also provide the cdr_arrangement_id of the consent to the data holder as part of the amendment process. This will provide consumers with a streamlined authorisation experience as required in the amending authorisation standards. For more information, see Amending Authorisation Standards.
Amendments to collection duration or dataset collection require data holder authentication and authorisation. Amendments to disclosure consents, use consents, including adding/removing uses or amending disclosure and/or use durations, do not require data holder authentication and authorisation.
Data recipients may also allow consumers to amend the attributes of a consent via their consumer dashboard. The guidelines in this section provide examples of how to implement amending consents where the data recipient invites the consumer to amend a current consent.
<aside> <img src="/icons/info-alternate_gray.svg" alt="/icons/info-alternate_gray.svg" width="40px" /> Note: The wireframes shown are examples of how to implement key rules, standards, and guidelines. Use the on-screen functions to adjust zoom level or expand the wireframes to be viewed at full screen.
</aside>