A consent expires at the earliest of: withdrawal through the dashboard (immediately); withdrawal by the alternative method (when given effect, or 2 business days after receipt); 12 months (7 years for a business consumer consent with a business consumer statement) after it was given or last amended in period; the end of the consented period; or expiry under another rule (for example when a sponsored person loses its registered sponsor). A collection consent also expires when a data holder notifies withdrawal of the related authorisation; a collection consent and the matching AP disclosure consent expire together once one party is notified of the other's expiry; consents relating to data of which the accredited person becomes a data holder under subsection 56AJ(4) of the Act expire; and all consents expire when accreditation is revoked or surrendered.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.