Change log

Updated CX checklist (web version and files) to reflect requirement changes relating to: • Competition and Consumer (Consumer Data Right) Amendment (2024 Measures No. 1) Rules 2024; • Decision 350: August 2024 Rules - Standards Impacts; • Change Request 674: CX Guidelines | Updates stemming from 2024 Consent Review changes; • Change Request 574: Additional functionality to support account selection; • Change Request 659: Enhancing CDR Adoption: Streamlining Account Selection and Improving Data Transparency; and • Change Request 646: Clarify selection of Trusted Adviser in the CX Guidelines Download files CX Checklist v1.34.0.2025.03.19 For details, see Change log: Consent: Collection and use consents v1.33.0.2025.03.05 Consent: Amending consent v1.33.0.2025.03.05 Consent: Disclosure consents, AP disclosure consents v1.34.0.2025.03.19 Consent: Disclosure consents, Trusted Adviser disclosure consents v1.34.0.2025.03.19 Consent: Disclosure consents, Insights disclosure consents v1.34.0.2025.03.19 Consent: Disclosure consents, Business Consumer disclosure consents v1.34.0.2025.03.19 Consent management (Data recipient): Collection and use consents v1.33.1.2025.03.07 Consent management (Data recipient): Disclosure consents v1.33.1.2025.03.07 Consent management (Data recipient): Withdrawal v1.33.1.2025.03.07 Notifications: CDR Receipts v1.33.0.2025.02.27 Notifications: 90-day Notifications v1.33.0.2025.02.27 Authorise: Authorisation to disclose joint account data v1.33.0.2025.02.26 Consent management (Data holder): Authorisations v1.33.0.2025.02.26 Consent management (Data holder): Withdrawal v1.33.0.2025.02.26 Consent management (Data holder): Account permissions - Secondary Users v1.33.0.2025.02.26 Authorise: Authorisation to disclose v1.32.0.2024.12.10 Consent: Disclosure consents, Trusted Adviser disclosure consents v1.31.0.2024.10.03

Overview: CX Checklist

Updated CX artefacts and requirements to reflect: • Competition and Consumer (Consumer Data Right) Amendment (2024 Measures No. 1) Rules 2024; • Decision 350: August 2024 Rules - Standards Impacts; and • Change Request 674: CX Guidelines | Updates stemming from 2024 Consent Review changes. This includes: • Visual, UI and Experiential updates to reflect the new rule and standard requirements TA disclosure consents - Detached flow Rules changes • New rules annotations relating to: ◦ information that must be given to a consumer during the consent process (new checklist reference 1CO3.00.36) ◦ allowing data recipients to seek agreement to certain consent elements as presented to the consumer (new checklist item: 1CO3.00.37) ◦ transitional provisions for CDR Receipts (new checklist item: 1CO3.00.38) • Updates to existing rules requirements relating to requirements for: ◦ seeking consent including bundling (updated checklist item: 1CO3.00.01) ◦ allowing data recipients to seek agreement to certain consent elements as presented to the consumer (updated checklist item: 1CO3.00.02 and 1CO3.00.05) ◦ CDR Receipts (updated checklist item: 1CO3.00.06) • Retirement of existing rules requirements due to their removal from the rules (retired checklist item: 1CO3.00.07 and 1CO3.00.08) Standards changes New CX standard relating to CDR Receipt delivery (new checklist item: 1CO3.00.39) Guidelines changes • New CX guidelines relating to: ◦ when the TA selection step should be included or omitted (new checklist item: 1CO3.00.40) ◦ upfront information to onboard the consumer (new checklist item: 1CO3.00.41) ◦ CDR Receipt delivery and the transitional provisions for CDR Receipts (new checklist items: 1CO3.00.42–3) • Updates to existing CX guidelines to better clarify expectations (updated checklist items: 1CO3.00.29 and 1CO3.00.35) • Retirement of CX guideline annotations: ◦ that have been removed from this artefact for simplicity, stemming from feedback on CR674 (retired checklist items: 1CO3.00.19–20) ◦ relating to CDR Receipts (retired checklist item: 1CO3.00.31) TA disclosure consents - Bundled CDR Consents Rules changes • New rules annotations relating to: ◦ seeking consent including bundling (new checklist item: 1CO3.01.35–36 and 1CO3.01.39) ◦ information that must be given to a consumer during the consent process (new checklist item: 1CO3.01.36, 1CO3.01.41–43) ◦ allowing data recipients to seek agreement to certain consent elements as presented to the consumer (new checklist item: 1CO3.01.38) ◦ the data minimisation principle (new checklist item: 1CO3.01.37 and 1CO3.01.40) ◦ redundant data handling (new checklist item: 1CO3.01.44) ◦ CDR Receipts and transitional provisions for CDR Receipts (new checklist item: 1CO3.01.45–46) • Updates to existing rules requirements relating to requirements for: ◦ allowing data recipients to seek agreement to certain consent elements as presented to the consumer (updated checklist item: 1CO3.01.01 and 1CO3.01.03) ◦ seeking consent including bundling (updated checklist item: 1CO3.01.04) ◦ CDR Receipts (updated checklist item: 1CO3.01.05) • Retirement of existing rules requirements due to their removal from the rules (retired checklist items: 1CO3.01.06–07) Standards changes • New annotation of existing CX standard relating to the Collection Source (new checklist item: 1CO3.01.47) • New CX standard relating to CDR Receipt delivery (new checklist item: 1CO3.01.48) • Retirement of standards annotations that — while not removed from the standards — have been removed from this artefact to simplify the consent flow (retired checklist item: 1CO3.01.13–14) Guidelines changes • New CX guidelines relating to: ◦ data holder selection (new checklist items: 1CO3.01.49–53) ◦ when the TA selection step should be included or omitted (new checklist item: 1CO3.01.54) ◦ time period and the data minimisation principle (new checklist item: 1CO3.01.55) ◦ data recipient accreditation verification (new checklist item: 1CO3.01.56) ◦ the display of information (new checklist item: 1CO3.01.57) ◦ CDR Receipt delivery and the transitional provisions for CDR Receipts (new checklist item: 1CO3.01.58–59) • Updates to existing CX guidelines to better clarify expectations (updated checklist item: 1CO3.01.27 and 1CO3.01.33–34) • Retirement of CX guideline annotations that have been removed from this artefact for simplicity, stemming from feedback on CR674 (retired checklist items: 1CO3.00.19–20) CX Guideline website page • Updates to page hierarchy for clarity — ◦ updates to section title, from ‘Detached flow - default example’ to ‘Detached flow' ◦ new section for ‘Bundled CDR Consents’ • Updates to include references to consultations for rules, standards and guidelines • Updates to CX checlist • New open source design asset 1CO3. Trusted Adviser disclosure consent v1.34.0.2025.03.19

Consent: Disclosure consents, Trusted Adviser disclosure consents

Updated CX artefacts and requirements to reflect: • Competition and Consumer (Consumer Data Right) Amendment (2024 Measures No. 1) Rules 2024; • Decision 350: August 2024 Rules - Standards Impacts; and • Change Request 674: CX Guidelines | Updates stemming from 2024 Consent Review changes. This includes: • Visual, UI and Experiential updates to reflect the new rule and standard requirements Business consumer disclosure consents - Detached flow Rules changes • New annotations relating to: ◦ information that must be given to a consumer during the consent process (new checklist item: 1CO5.00.38) ◦ seeking consent (updated checklist item: 1CO5.00.39) ◦ transitional provisions for CDR Receipts (new checklist item: 1CO1.00.40) • Updates to existing rules requirements relating to requirements for: ◦ seeking consent including bundling (updated checklist item: 1CO5.00.01) ◦ allowing data recipients to seek agreement to certain consent elements as presented to the consumer (updated checklist items: 1CO5.00.04, 1CO5.00.11 and 1CO5.00.14) ◦ CDR Receipts (updated checklist item: 1CO5.00.15) • Retirement of existing rules requirements due to their removal from the rules (retired checklist items: 1CO5.00.16–17) Standards changes New CX standard relating to CDR Receipt delivery (new checklist reference 1CO5.00.41) Guidelines changes • New CX guidelines relating to: ◦ the fact that individuals without an active ABN cannot be treated as business consumers (new checklist item: 1CO5.00.42) ◦ clarifying when a non-accredited person selection step may be required (new checklist item: 1CO5.00.43) ◦ the display of information (new checklist item: 1CO5.00.44) ◦ when data language standards apply (new checklist item: 1CO5.00.45) ◦ CDR Receipt delivery and the transitional provisions for CDR Receipts (new checklist items: 1CO5.00.46–47) • Updates to existing CX Guideline annotations to better clarify expectations in relating to duration selection (updated checklist item: 1CO5.00.35) • Retirement of CX guideline annotations that have been removed from this artefact for simplicity, stemming from feedback on CR674 (retired checklist items: 1CO5.00.30–31) Business consumer disclosure consents - Bundled CDR Consents New CX artefacts and requirements relating to bundled collection, use and disclosure consents for business consumers. These artefacts provide implementation examples to reflect the updated rules relating to seeking consent. CX Guideline website page • Updates to page hierarchy to add new section for ‘Bundled CDR Consents’ • Updates to include references to consultations for rules, standards and guidelines • New open source design asset 1CO5. Business consumer disclosure consent v1.34.0.2025.03.19

Consent: Disclosure consents, Business consumer disclosure consents

Updated CX artefacts and requirements to reflect: • Competition and Consumer (Consumer Data Right) Amendment (2024 Measures No. 1) Rules 2024; • Decision 350: August 2024 Rules - Standards Impacts; and • Change Request 674: CX Guidelines | Updates stemming from 2024 Consent Review changes. This includes: • Visual, UI and Experiential updates to reflect the new rule and standard requirements AP disclosure consents - Detached flow, Disclosing unmodified data Rules changes • New annotations relating to: ◦ information that must be given to a consumer during the consent process (new checklist item: 1CO1.00.36) ◦ transitional provisions for CDR Receipts (new checklist item: 1CO1.00.37) • Updates to existing rules requirements relating to requirements for: ◦ seeking consent including bundling (updated checklist items: 1CO1.00.03–04, 1CO1.01.11, 1CO1.00.13 and 1CO1.00.19) ◦ allowing data recipients to seek agreement to certain consent elements as presented to the consumer (updated checklist items: 1CO1.00.06–07 and 1CO1.01.09) ◦ CDR Receipts (updated checklist item: 1CO1.00.20) • Retirement of existing rules requirements due to their removal from the rules (retired checklist items: 1CO1.00.12 and 1CO1.00.21–22) • Retirement of rules annotations that — while not removed from the rules package — have been removed from this artefact for simplicity, or because they are no longer relevant to the flow (retired checklist items: 1CO1.00.14–15, 1CO1.00.18 and 1CO1.00.34) Standards changes • New CX standard relating to CDR Receipt delivery (new checklist reference 1CO1.00.38) • Retirement of standards annotations that — while not removed from the standards — have been removed from this artefact for simplicity, or because they are no longer relevant to the flow (retired checklist items: 1CO1.00.23 and 1CO1.00.27) Guidelines changes • New CX guidelines relating to: ◦ when data language standards apply (new checklist item: 1CO1.00.39) ◦ CDR Receipt delivery and the transitional provisions for CDR Receipts (new checklist item: 1CO1.00.40) • Retirement of CX guideline annotations that have been removed from this artefact for simplicity, or because they are no longer relevant to the flow (retired checklist items: 1CO1.00.33) AP disclosure consents - Detached flow, Disclosing unmodified data Rules changes Updates to existing rules requirements relating to requirements for: • allowing data recipients to seek agreement to certain consent elements as presented to the consumer (updated checklist item: 1CO1.01.01) • seeking consent including bundling (updated checklist item: 1CO1.02.03) AP disclosure consents - Bundled CDR Consents New CX artefacts and requirements relating to bundled collection, use and disclosure consents for accredited persons. These artefacts provide implementation examples to reflect the updated rules relating to seeking consent. CX Guideline website page • Updates to page hierarchy for clarity — ◦ new ‘Detached flow’ section containing exisiting ‘Disclosing unmodified data’ and ‘Disclosing modified data' ◦ new section for ‘Bundled CDR Consents’ • Updates to include references to consultations for rules, standards and guidelines • New open source design asset 1CO1. AP disclosure consent v1.34.0.2025.03.19

Consent: Disclosure consents, Accredited person disclosure consents

Updated CX artefacts and requirements to reflect: • Competition and Consumer (Consumer Data Right) Amendment (2024 Measures No. 1) Rules 2024; • Decision 350: August 2024 Rules - Standards Impacts; and • Change Request 674: CX Guidelines | Updates stemming from 2024 Consent Review changes. This includes: Insights disclosure consents - Detached flow • Visual, UI and Experiential updates to reflect the new rule and standard requirements Rules changes • New annotations relating to: ◦ information that must be given to a consumer during the consent process (new checklist item: 1CO4.00.47) ◦ allowing data recipients to seek agreement to certain consent elements as presented to the consumer (new checklist item: 1CO4.00.48) ◦ transitional provisions for CDR Receipts (new checklist item: 1CO4.00.49) • Updates to existing rules requirements relating to requirements for: ◦ seeking consent including bundling (updated checklist item: 1CO4.00.01) ◦ allowing data recipients to seek agreement to certain consent elements as presented to the consumer (updated checklist items: 1CO4.00.02 and 1CO4.00.04) ◦ CDR Receipts (updated checklist item: 1CO4.00.07) • Retirement of existing rules requirements due to their removal from the rules (retired checklist items: 1CO4.00.08 and 1CO4.00.09) Standards changes • New CX standard relating to CDR Receipt delivery (new checklist item: 1CO4.00.50) Guidelines changes • New CX guidelines relating to: ◦ when the non-AP selection step should be included or omitted (new checklist item: 1CO4.00.51) ◦ CDR Receipt delivery and the transitional provisions for CDR Receipts (new checklist items: 1CO4.00.52 and 1CO4.00.53) • Updates to existing CX guidelines to simplify and better clarify expectations regarding what data will be disclosed, actual insights and success messages (updated checklist items: 1CO4.00.28, 1CO4.00.29 and 1CO4.00.41) • Retirement of CX guidelines relating to: ◦ annotations that have been removed from this artefact for simplicity, stemming from feedback on CR674 (retired checklist items: 1CO4.00.24 and 1CO4.00.26) ◦ the trust rating component (retired checklist item: 1CO4.00.25) ◦ CDR receipts and the display of actual insights (retired checklist items: 1CO4.00.42 and 1CO4.00.43) Insights disclosure consents - Bundled CDR Consents New CX artefacts and requirements relating to bundled collect, use and insights disclosure consents. These artefacts provide implementation examples to reflect the updated rules relating to seeking consent. CX Guideline website page • Updates to page hierarchy for clarity — ◦ updates to section title, from ‘Detached flow - default example’ to ‘Detached flow' ◦ new section for ‘Bundled CDR Consents’ • Updates to include references to consultations for rules, standards and guidelines • New open source design asset 1CO4. Insights disclosure consent v1.34.0.2025.03.19

Consent: Disclosure consents, Insight disclosure consents