ConsumerDataStandardsAustralia / standards

Work space for data standards development in Australia under the Consumer Data Right regime
Other
321 stars 56 forks source link

Decision Proposal 51 - Scheduled Payments #51

Closed JamesMBligh closed 5 years ago

JamesMBligh commented 5 years ago

This issue relates to the end points and payloads for Scheduled Payments. Scheduled Payments are the payments that the customer has registered with a bank to occur on a regular basis.

The decision proposal is attached below. Feedback will close on the 22nd May. Decision Proposal 051 - Scheduled Payments.pdf

JamesMBligh commented 5 years ago

The proposal has now been published

assem-ali commented 5 years ago

Hi James, For scheduled payments setup using a joint account as the source, are you expecting the schedules setup by both parties to be returned irrespective of the authorised user, or only the schedules setup by the authorised user?

In our digital channel, only the schedules setup by the logged in user are presented.

JamesMBligh commented 5 years ago

Hi @assem-ali, as far as I am aware there is nothing in the rules or legislation to clarify this so I would be leaning on the previous decisions that have been made around principles and non-functional requirements to resolve this.

As a result, I would suggest that you should align with your existing digital channel experience as this is what the customer would be expecting. This is also supported by the underlying principle of CDR being able sharing the data owned by a customer and, in the experience created by your channels, the schedules created by another customer would appear to be owned by that other customer.

Does that make sense as a position?

assem-ali commented 5 years ago

Hi @assem-ali, as far as I am aware there is nothing in the rules or legislation to clarify this so I would be leaning on the previous decisions that have been made around principles and non-functional requirements to resolve this.

As a result, I would suggest that you should align with your existing digital channel experience as this is what the customer would be expecting. This is also supported by the underlying principle of CDR being able sharing the data owned by a customer and, in the experience created by your channels, the schedules created by another customer would appear to be owned by that other customer.

Does that make sense as a position?

Thanks James, will take the channel parity as the principle here as you indicated.

anzbankau commented 5 years ago

Hi James,

A few comments on the scheduled payments endpoint:

commbankoss commented 5 years ago

Commonwealth Bank supports the decision proposal with a minor adjustment to accountID definition. It is unclear what account ID (from and to) will be used. Our recommendation would be that the ID does not contain any sensitive consumer information such as account number or BSB, the identifier should be compliant with the ID permanence rules. We oppose any on sharing of information about another consumer without their explicit consent. We support that the decision proposal for schedule payments is independent of the Payee endpoint.

As the proposal stands the response will change dependant on the scope. The data recipent and holder will need to monitor the scope for any changes. For transfers between accounts the consumer owns the destination account and it can vary between accountID or domestic formats weather the destination account is included within the current scope. For accounts the customer doesn’t own the domestic format may include the PayeeID or not depending if it within the consumers scope. Commonwealth Bank is concerned that we are introducing data leakage.

NationalAustraliaBank commented 5 years ago

NAB has the following feedback on this decision proposal for Scheduled Payments end points.

Sensitive information

We would like to draw attention to our previous feedback related to the proposed sharing of sensitive payment related information, captured in https://github.com/ConsumerDataStandardsAustralia/standards/issues/32#issuecomment-434957636 and https://github.com/ConsumerDataStandardsAustralia/standards/issues/39#issuecomment-441159032. Our previous feedback is also relevant to this decision proposal.

One-to-many payment instructions

NAB customers are able to schedule payments under a single payment instruction which comprises of multiple funds transfers from one customer's account to a set of other accounts. Whilst this kind of instruction can be partially represented in the proposed API, there is no provision in the proposal that would allow Data Recipients to identify the set of payments that belong under a common payment instruction. We would like to see this supported within the response or as a separate payment details endpoint.

Additional payment types

Continuing on the theme within the feedback from @anzbankau https://github.com/ConsumerDataStandardsAustralia/standards/issues/51#issuecomment-494196242 regarding variable / unknown payment data, there are other payment types like automatic saving plans (see direct debit authorisations below) and customer configurable sweep in / out transfers that are both date based or event based. To support these payment types there would be both new fields and objects required as well as changes to currently mandatory fields.

Direct debit authorisations

Scheduled payments under a direct debit authorisation (different to decision https://github.com/ConsumerDataStandardsAustralia/standards/issues/57 for direct debit deductions), where the customer has received third party authority to debit funds from a third party account and credited into their own account, is not catered for within the decision proposal. Using a negative AmountString for these payments to reverse the from (source) and to (destination) objects is potentially confusing. Also, should there be a constraint or new data type for the amount field being a positive amount?

Non-consumer complex payment types

Noting that it is not scoped in the draft rules, this decision proposal does not cater for complex payment types that would be seen outside the consumer banking domain, for example, complex payments within corporate and institutional banking. Should this come into scope, we expect that this be catered for in later versions of the standards.

JamesMBligh commented 5 years ago

Thanks for the feedback. This is all very useful and will be reviewed and incorporated. I'll be closing down feedback on this thread. Any additional feedback or points of clarification can be posted on the current open thread for feedback (#67)

JamesMBligh commented 5 years ago

Please find attached the final decision covering this issue Decision 051 - Scheduled Payments.pdf