The Consent Flow is divided into three stages: Consent; Authenticate; and Authorise.
Example prototype
About the Consent Flow
While the CX Guidelines are focused on The Consent Model (Consent, Authenticate and Authorise, Consent Management, and Notifications), the CX research highlighted the importance of the pre-consent and post-consent stages.
Pre-Consent
Data recipient space
At this stage, the consumer engages with an ADR’s value proposition and learns about the Consumer Data Right (CDR). The pre-consent stage may occur, for example, after the consumer has commenced CDR onboarding but before their consent is sought. This phase is conducive to the building of consumer trust and confidence while clearly communicating the benefits of data sharing.
Consent
Data recipient space
Consumer decides whether or not to consent to the collection and use of their data after reviewing the terms of the consent, such as:
- who is requesting their data;
- what data is being requested;
- when the data will be shared;
- where data is shared to and from;
- why their data is being requested; and
- how they can manage and control the sharing and use of their data.
Authenticate
Data holder space
Consumer verifies who they are to their data holder.
Authorise
Data holder space
Consumer:
- selects the accounts they would like to share data from;
- reviews a summary of the data that will be shared; and
- authorises the sharing of that data from the data holder to the data recipient.
Post-Consent
Data recipient space Data holder space
Consumer is presented with the outcomes of data sharing. Post-consent is the stage immediately following a authorisation, where the ADR provides the outcome of data sharing and is able to close feedback loops.
See 'Consent Management' CX Guidelines and example wireframes
Last updated
This page was updated @Sep 29, 2025
Quick links to CX Guidelines: