Consent status, expiry date and share status

Check the Feed Status Before Collecting Data

When collecting data from ACSISS, your platform should first check the feed status to confirm that data is available for collection. A feed may stop supplying data for a number of reasons, including changes to the customer's consent with their bank or the permission to share data with your platform.

For CDR feeds, there are two permissions that need to be considered:

Consent : Permission given by the account holder to the ADR (SISS) to collect their account data from the bank on their behalf.

Share : Permission given by the account holder for the ADR (SISS) to share that data onward with the fintech or software platform.

Typically, both the bank consent and the share permission have a validity period of one year, in line with the CDR requirements for consent permissions. The customer will need to re-consent before the relevant permission expires to ensure the data supply remains active.

Consent Status

The consent with the bank exists between the account holder and the bank. As a result, SISS does not control when or why the bank changes the state of a consent.

A consent that was previously active can move to another state for several reasons. Your platform should account for these states when determining whether data can be collected.

Share Status

Although the consent and share are part of the same customer journey in ACSISS, they represent two different permissions.

The share permission determines whether SISS is authorised to provide the collected data to your software platform. It is therefore important that platforms integrating with ACSISS understand and handle the different share states appropriately.