Amending expired consents

Question

Are Data Holders (DHs) required to support amending of expired or revoked consents?

Answer

Technically consents cannot be amended.  Consents can be revoked and a new consent can be created, linked to a previous revoked consent via a common cdr_arrangement_id.

Data Holders must support consent expiry and revocation as per the rules and the standards.

See:

• CDS Security Profile, Identifiers and Subject Types, CDR Arrangement ID
• CDS Security Profile, Security End Points, Token Revocation End Point