Authorise

This section covers how data holders may ask a consumer to authorise the disclosure of CDR data.
icon
New URL @December 2, 2024

The CX guidelines have been re-launched on a new domain: cx.dsb.gov.au

For more information, refer to Change log: Consumer Experience (CX) Guidelines

On this page

Overview

In accordance with CDR Rule 4.24, the authorisation process must not:

  • Add any requirements to the authorisation process beyond what is outlined in the data standards and the CDR rules.
  • Provide or request additional information during the authorisation process beyond what is specified in the data standards and the CDR rules.
  • Offer additional or alternative services as part of this authorisation process.
  • Include or refer to other documents.

In addition, CDR Rule 4.22 states that a data holder’s processes for asking a CDR consumer to give or amend an authorisation must:

  • Accord with the data standards; and
  • Have regard to any consumer experience guidelines developed by the Data Standards Body, be as easy to understand as practicable, including by use of concise language and, where appropriate, visual aids.
Authorise is the third stage of
Authorise is the third stage of The Consent Model.

The Authorise stage typically consists of two steps:

  • Account selection
  • At this step, the consumer can select the accounts they would like to share data from.

  • Confirmation
  • At this step, the consumer can review and confirm what they are allowing the data recipient to access.

CX Guidelines for Authorise

The below CX Guidelines cover variations for the authorisation process. Note: The Account selection and Confirmation steps are conflated in this section.

A high level example of the relationship between Account selection and Confirmation, the two main steps in Authorisation.
A high level example of the relationship between Account selection and Confirmation, the two main steps in Authorisation.
Authorisation to disclose

These guidelines provide examples for how to implement the authorisation flow for common scenarios. Read more about Authorisation to disclose.

Amending authorisations

These guidelines provide examples for how to implement the authorisation flow where a consent has been amended. Read more about Amending authorisations.

Authorisation to disclose joint account data

These guidelines provide examples for how to implement the authorisation flow when disclosing data from joint accounts. Read more about Authorisation to disclose joint account data.

Last updated

This page was updated @December 20, 2021

Have your say

Community consultations and maintenance are part of our ongoing process. Here’s how you can get involved:

The Consumer Data Standards Program is part of Treasury. Copyright © Commonwealth of Australia 2023. The information provided on this website is licensed for re-distribution and re-use in accordance with Creative Commons Attribution 4.0 International (CC-BY 4.0) Licence.