Updated @March 6, 2024
These guidelines provide examples for how to implement accredited person disclosure consents.
On this page
Overview
An accredited person (AP) disclosure consent allows consumers to consent to an accredited data recipient disclosing their CDR data to another accredited person.
In accordance with CDR rule 4.7A and 4.7B, an AP disclosure consent can occur after or before the other data recipient* has obtained a collection and use consent from the consumer. These rules outline conditions for when an AP disclosure consent can occur.
Under CDR Rule 4.3B, CDR representatives who hold the consumer’s CDR data as service data are able to request an AP disclosure consent from a consumer. They are also able to be the recipient of data disclosed under an AP disclosure consent, provided they have sought a relevant collection and use consent from the consumer.
This section caters to an array of scenarios that may extend to a chain of disclosure consents between data recipients, referred to as data recipient 1 (ADR1), data recipient 2 (ADR2), and data recipient 3 (ADR3).
* NB: For simplicity, the use of the terms 'data recipient' and 'Accredited data recipient (ADR)' in these guidelines refer to an ‘accredited person’ as defined by the rules, or a CDR representative, under CDR Rule 4.3B.
Wireframes and guidelines
Disclosing unmodified data
The following wireframes show an example of a consent to disclose unmodified data. Other variations of disclosure consent can be found in the below sections.
Disclosing modified data
The following wireframes show examples of disclosing modified data where data recipient 1 (ADR1) is aware of the consumer's original data holder(s); and where data recipient 3 (ADR3) is unaware of the consumer's original data holder(s) and can only refer to the data recipient (ADR1) that they collected the associated data from.
Download open source asset
Open sources design assets are created in Figma for the purposes of assisting implementation. This Figma file contains annotated wireframes and working prototypes for AP disclosure consent, including:
- Disclosing unmodified data
- Disclosing modified data
| Item | File | Date released | Version introduced |
|---|---|---|---|
March 6, 2024 | 1.29.1 |
For past versions, refer to Change log.
References
These CX Guidelines were informed by consultations and research conducted in 2019 to 2021, including the following:
- Consultations
- ACCC 2020, Draft v2 Rules consultation (see concept 4.2 Disclosure)
- DSB 2021, Decision Proposal 187 - CX Standards | Disclosure Consents
- CX research
- Tobias 2019, Phase 1 CX report
- GippsTech 2019, Phase 2, Stream 1 report
- Greater than X 2019, Phase 2, Stream 2 report
- Tobias 2019, Phase 2, Stream 3 report
- DSB 2020, Phase 3 Round 8 summary (PDF)
- DSB 2021, Disclosure Consent Research Report (Q4 2021, R1-2)
- Other
- WCAG 2021, 3.1.5 Reading Level - Level AAA
- Australian Government Style Manual 2021, Literacy and access
Quick links to CX Guidelines:
→ cx@consumerdatastandards.gov.au → cx.cds.gov.au | cds.gov.au
