5CM1.04.01
01
(1) If a data holder receives a consumer data request from an accredited person on behalf of a CDR consumer, the data holder must, in the circumstances specified in a sector Schedule, ensure that it provides the CDR consumer with an online service that: (c) has a functionality that: (i) allows for withdrawal, at any time, of authorisations to disclose CDR data; and (ii) is simple and straightforward to use; and (iii) is no more complicated to use than the process for giving the authorisation to disclose CDR data; and (iv) is prominently displayed; and (v) as part of the withdrawal process, displays a message relating to the consequences of the withdrawal in accordance with the data standards;
CDR Rule 1.15(1)(c)
Consent Management (Data holder): Authorisations
9 April 2024