[ARCHIVE] CDR receipt requirements

Archived 2023.01.11. Content moved to Guidance on Dashboards

Question

Rule 4.18 CDR receipts states that Accredited Data Recipients (ADRs) are required to provide CDR receipts, "in writing otherwise than through the ... consumer dashboard". 

Do Data Holders (DHs) have to provide a CDR receipt to customers?

Does the CDR receipt have to be provided in a medium other than customer dashboard, such as email?

In the CX guidelines for the DH dashboard, a wireframe example shows a "send this sharing arrangement to your email" feature. Is this mandatory?

Answer

Only ADRs are required to provide a CDR Receipt, however we recommend DHs also provide a CDR Receipt. Many DHs are doing this today via email, including major banks. 

The "send this..." feature is a shown as a guideline, not a standard. It's a way for a consumer to see an up to date record of their sharing arrangement. For ADRs, CDR Receipts may be included in the dashboard but must be given in writing other than through the dashboard. 

See:

• CDR Rules, 4.18 CDR receipts - Main section, Part 4, Division 4, Division 4.3 Giving and amending consents, Subdivision 4.3.5 Notification requirements
• CX Guidelines, Data Holder dashboards