The processes by which a customer grants, reviews and withdraws permission for a third party to access their financial data or initiate payments.
Consent must be explicit, limited to a defined scope and duration, and revocable at any time. Under PSD2 an access consent is time-limited and must be renewed, which is why aggregation connections periodically stop and require the customer to re-authenticate.
Good consent management means the customer can see at a glance who has access to what, and end it in one step.
