ACSISS Platform
ACSISS Platform
Breadcrumbs

Consent - annual renewal & reconsent

CDR consent for business bank data is valid for a maximum period of 12 months. Platforms must ensure their customer-facing processes support annual consent renewal and provide a clear reconsent journey before consent expires.

Platforms should:

  • Clearly display the consent expiry date to the end customer.

  • Provide timely notifications or prompts when consent is approaching expiry.

  • Clearly communicate when consent has expired and that the customer needs to complete the consent journey again.

  • Provide a clear reconsent process that allows the customer to renew their consent without unnecessary confusion.

  • Correctly update the consent and processing status in the platform following successful reconsent.

  • Ensure that an expired or revoked consent is not presented to the customer as an active or processing feed.

As part of the production readiness review, ACSISS may review how the platform handles the consent lifecycle, including consent expiry, customer notification, reconsent, and the resulting consent and processing status displayed in the platform.