This section covers how data holders may ask a consumer to authorise the disclosure of CDR data.

<aside> <img src="/icons/info-alternate_gray.svg" alt="/icons/info-alternate_gray.svg" width="40px" /> New CX Guidelines URL September 21, 2023

The CX guidelines have been re-launched on a new domain: cx.cds.gov.au

For more information, refer to Change log: Consumer Experience (CX) Guidelines

</aside>

<aside>

• On this page </aside>

Overview

In accordance with CDR Rule 4.24, the authorisation process must not:

• Add any requirements to the authorisation process beyond what is outlined in the data standards and the CDR rules.
• Provide or request additional information during the authorisation process beyond what is specified in the data standards and the CDR rules.
• Offer additional or alternative services as part of this authorisation process.
• Include or refer to other documents.

In addition, CDR Rule 4.22 states that a data holder’s processes for asking a CDR consumer to give or amend an authorisation must:

• Accord with the data standards; and
• Have regard to any consumer experience guidelines developed by the Data Standards Body, be as easy to understand as practicable, including by use of concise language and, where appropriate, visual aids.

Authorise is the third stage of ‣.

The Authorise stage typically consists of two steps:

• Account selection

  At this step, the consumer can select the accounts they would like to share data from.

• Confirmation

  At this step, the consumer can review and confirm what they are allowing the data recipient to access.

CX Guidelines for Authorise

The below CX Guidelines cover variations for the authorisation process. Note: The Account selection and Confirmation steps are conflated in this section.

A high level example of the relationship between Account selection and Confirmation, the two main steps in Authorisation.

Authorisation to disclose

These guidelines provide examples for how to implement the authorisation flow for common scenarios. Read more about Authorisation to disclose.