DSB Item - A Rich Consent Taxonomy For Action Initiation

[CDR-API-Stream]

Problem Statement

In Decision 182, the Data Standards Chair approved four recommendations. This Future Plan item covers Recommendation 4 and the definition of an extensible CDR consent model be defined which provides an extensible base for fine-grained action initiation and data sharing that is sector agnostic.

Consultation should consider the existing needs of the CDR in determining how the current data sharing consent requirements can be defined within a FAPI 2.0 Rich Authorisation Request (RAR) structure. Extensions to the CDR consent model should be considered based on specific needs arising from additional sectors, purpose-based consent, and possible extension to action initiation.

Key Future Directions Recommendations

• Recommendation 1.1 – Balanced approach to safety, efficiency and effectiveness
• Recommendation 4.10 – Consent to send instruction and consent to initiate action
• Recommendation 4.12 – Ongoing consent arrangements
• Recommendation 4.16 – Authorisation to take a specific action
• Recommendation 4.17 – Data holders to require explicit consumer authorisation to accept instructions
• Recommendation 5.12 – Fine-grained payment initiation authorisation
• Recommendation 6.19 – Consumer Data Right dictionary
• Recommendation 6.20 – Industry recommended and endorsed consents
• Recommendation 7.11 – Protections for action initiation instructions to be considered in the privacy and security assessments

[markverstege]

This item has been moved to the backlog. Consultation on the FAPI 2.0 roadmap is required first.