A consent given to a representative expires at the earliest of: dashboard withdrawal; non-dashboard withdrawal (when given effect, or 2 business days after receipt); 12 months after it was given or its period last amended; the end of the consented period; or expiry under another rule. A collection consent also expires when a data holder notifies the principal of withdrawal of the related authorisation; linked collection and AP disclosure consents expire together once one side is notified; and all consents of a principal's representatives expire when the principal's accreditation is revoked or surrendered.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.