This page covers collection and use consents as per the requirements in rule 4.11 and the associated consumer experience data standards.

<aside>

• On this page </aside>

Overview

The object statement in CDR rule 4.9 provides a strong foundation for giving and amending CDR consents.

• Object statement

In accordance with CDR rule 4.11(1)(Note 1), an accredited person cannot infer consent, or seek to rely on an implied consent.

When asking a CDR consumer to give consent, a data recipient must:

• accord with the data standards;
• have regard to any consumer experience guidelines developed by the Data Standards Body
• be as easy to understand as practicable, including by use of concise language and, where appropriate, visual aids;

Data recipients should make the consent process as easy to understand as possible by using appropriate interventions to mitigate cognitive overload, facilitate comprehension, and provide transparency and consumer control.

This section provides examples illustrating how the guidelines may be implemented.

Consent is the first stage of The Consent Model.

These types of consents contain several steps, which may include:

• Provider selection At this step, the consumer selects who they want to share data from, such as their data holder.
• Terms of consent At this step, the consumer is asked for their consent and can do so by choosing the types of CDR data they will allow the ADR to access, the access period, and the specific uses of their data.

A high level example of the provider selection and terms of consent steps.

Wireframes and guidelines

<aside> <img src="/icons/info-alternate_gray.svg" alt="/icons/info-alternate_gray.svg" width="40px" />

Note: The wireframes shown are examples of how to implement key rules, standards, and guidelines. Use the on-screen functions to adjust zoom level or expand the wireframes to be viewed at full screen.

</aside>