This page covers CDR receipts as per the requirements in rule 4.18 (and 4.20O for CDR representatives) and the associated consumer experience data standards.

This page outlines requirements for CDR receipts that take effect on 14 July 2025.

The existing requirements regarding CDR receipts will continue to apply until the relevant data standards are made and in effect, as per the transitional provision outlined in CDR Rule 503 (and 506 for CDR representatives).

Data recipients should refer to the CDR Rules as they were in effect from 22 July 2023 to 11 November 2024 for details of their obligations with regards to CDR receipts until this date.

</aside>

<aside>

On this page </aside>

Overview

A CDR receipt must be given as soon as practicable after a consumer gives, amends, or withdraws a collection, use, or disclosure consent. This section provides guidance for how to implement CDR receipts, including what must be included in CDR receipts and how they must be delivered.

A consumer must be given a receipt after consent is granted, amended, or withdrawn.

Wireframes and guidelines

Note: The wireframes shown are examples of how to implement key rules, standards, and guidelines. Use the on-screen functions to adjust zoom level or expand the wireframes to be viewed at full screen.

</aside>

The following wireframes show CDR receipts examples for:

collection and use consent granted;
bundled collection, use and disclosure consent granted;
detached insights disclosure consent granted; and
collection and use consent withdrawn.

https://embed.figma.com/design/vil5rL3bRLT84Gd4F8xG51/4CM3.-CDR-Receipts-v1.33.0.2025.02.27?node-id=12719-4882&embed-host=notion&footer=false&theme=system

See key requirements and guidelines