Updated November 9, 2023


These guidelines provide examples for how to implement collection and use consents for common scenarios.

On this page


Overview

In accordance with Rule 4.11(1)(Note 1), an accredited person cannot infer consent, or seek to rely on an implied consent. Consent must be voluntary, express, informed, specific as to purpose, time limited, and easily withdrawn.

When asking a CDR consumer to give consent, a data recipient must:

Data recipients should make the consent process as easy to understand as possible by using appropriate interventions to mitigate cognitive overload, facilitate comprehension, and provide transparency and consumer control.

This section provides examples illustrating how the guidelines may be implemented.

Consent is the first stage of ‣.

Consent is the first stage of ‣.

These types of consents contain several steps, which may include:

A high level example of the provider selection and terms of consent steps

A high level example of the provider selection and terms of consent steps