How can account holders make, revoke and manage secondary user instructions?
Rule 1.13(1)(e) requires a data holder to provide a service to account holders to make or revoke a secondary user instruction. That service need not be online but we encourage data holders to provide this service online in addition to any offline mediums that may be provided.
Rule 1.15(5) requires data holders to provide further functionality through an online service to account holders in relation to secondary users, including the ability to withdraw a secondary user instruction (r 1.15(5)(b)(ii)). We note that allowing the withdrawal of a secondary user instruction through an online service will satisfy the requirement at rule 1.13(1)(e)(ii) (withdrawing a secondary user instruction under rule 1.15(5)(b)(ii) has the same effect as revoking a secondary user instruction under rule 1.13(1)(e)(ii)).
If the data holder provides a consumer dashboard to an account holder, rule 1.15(7) requires that the functionality referred to in rule 1.15(5) is included in the account holder’s consumer dashboard.