Accredited Data Recipient (e.g., Budgeting App)

Data Holder (e.g., Bank)

1. Grant consent

2. Access data via API

3. Deliver service

Data Holder (e.g., Bank)

Accredited Data Recipient + Personal Data Store (PDS)

Third-Party App A (e.g., Financial Advisor)

Third-Party App B (e.g., Insurance Service)

1. Authorises consent

3. Manages data & access

2. Fetches data under CDR

4. Shares user-approved data

5. Shares user-approved data