4CM3.00.03
03
Effective from 14 July 2025: A CDR receipt provided by a data recipient MUST set out: • The name of the person the CDR consumer gave consent to; and • The purpose of the consent(s); and • In the case of a collection consent, the name of each CDR participant the CDR consumer consented to the collection of CDR data from; and • In the case of a disclosure consent, the name of each person the CDR consumer consented to the disclosure of CDR data to; and • A description of the data for which the consent was given; and • In the case of an insight disclosure consent, a description of the CDR insight(s); and • The duration or expiry date(s) of the relevant consent; and • Instructions for how the consent can be reviewed and, for an active consent, withdrawn, including by using a simple alternative method of communication to be made available by the accredited person for the purposes of withdrawal.
Notifications: CDR Receipts
27 February 2025