1CO2.03.46
46
This flow demonstrates an amendment to extend the duration of a bundled collection, use and business consumer disclosure consent. Such a bundled amendment may occur where the original consent was given in a bundled fashion and each consent is due to expire shortly. While data recipients may propose a consent duration of up to 7 years to business consumers for permitted consents under 1.10A(10), other consents, such as collection consents (and the corresponding data holder authorisations), are limited to a maximum of 12 months. To facilitate a streamlined amendment that matches how the original consent was given, data recipients may choose to propose a single duration of up to 12 months for all requested consents when inviting the consumer to give the initial consent. This would allow them to invite the consumer to renew all the consent types in a single action. Alternatively, data recipients can request detached consents of differing durations from the consumer, or a bundled consent with different durations for each consent type, with some consent types enduring for up to 7 years for business consumers. In those circumstances, these consents would be amended in a detached manner. If this approach were taken, collection consent renewals would need to be requested at least every 12 months, inline with the collection duration originally consented to.
CDR Rules 1.10A(10), 4.11(1)(b), 4.12(1)–(1A)
Consent: Amending consents
4 August 2025