1CO5.01.51
51
This flow demonstrates bundled collection, use, and business consumer disclosure consents. Data recipients may propose a consent duration of up to 7 years to business consumers for permitted consents under 1.10A(10). Other consents, such as collection consents (and the corresponding data holder authorisations), are limited to a maximum of 12 months. Data recipients may choose to propose durations that differ based on the consent type. If this approach were taken, collection consent renewals would still need to be requested at least every 12 months, inline with the collection duration originally consented to. Data recipients may alternatively choose to propose a single duration of up to 12 months for all the requested consents, despite being able to request up to 7 years for the use and disclosure consent. This would allow the data recipient to invite the consumer to renew all the consent types in a single action.
CDR Rules 1.10A(10), 4.11(1)(b), 4.12(1)–(1A)
Consent: Business consumer disclosure consent
19 March 2025