Competition and Consumer (Consumer Data Right) Rules 2020 4.23: Rule 4.23: give the consumer the required information when seeking or amending an authorisation

When asking a consumer to authorise disclosure or amend a current authorisation, the data holder must state the name of the accredited person that made the request, the period the requested data covers, the data types, whether disclosure is single-occasion or over a period of up to 12 months and, if so, the period, that the authorisation can be withdrawn at any time and how, plus any information the Register holds about the accredited person that is specified for this rule. A 7-year business consumer consent still needs a fresh authorisation at least every 12 months.