[ARCHIVE] Data recipient data in consent dashboards

Archived 2023.01.11. Content moved to Guidance on Dashboards

Question

Is the Data Holder (DH) required to account for missing or incorrect data in the consumer dashboard? For example, product data may be incomplete, or a logo URI may be broken.

Answer

Missing or incomplete data should be treated as an exception.  The register is expected to provided schema compliant responses to API calls.  The DH is not required, by the standards or rules, to accommodate missing or incorrect required data about a software product in the dashboard or consent screens.

Question

Are DHs required to expose DRSP (Data Recipient Software Product) numbers for a software product to consumers?

Answer

There is no requirement to display details about the software product to the consumer during authentication, authorisation, or in data holder dashboards. However, the CX Guidelines suggest the software product name be displayed for transparency, traceability, and to aid authorisation management.