How to revoke consent given to an Account Aggregator

What is an Account Aggregator and Why Revoke Consent?

The Account Aggregator India framework is a powerful system that lets you share your financial information securely. Think of it as a digital courier that fetches data from your banks (where your information is stored) and delivers it to a company that needs it, like a lender or financial advisor. You are always in control because you must give explicit permission, called 'consent', for this to happen.

So, why would you want to revoke that consent?

Your financial life changes. The reasons you shared your data might no longer exist. Here are a few common situations where revoking consent makes sense:

• Loan Application is Over: You applied for a loan, and the process is complete. Whether it was approved or rejected, the lender no longer needs ongoing access to your financial data.
• You Changed Your Mind: You started an application for a financial product but decided not to proceed. It's smart to cancel any data-sharing permissions you granted.
• Privacy Check-up: You might want to do a regular clean-up of your digital footprint and remove old permissions you are not using.
• Service No Longer Needed: You used a money management app that required your financial data, but you've stopped using the app.

Revoking consent is a fundamental right within the Account Aggregator framework. It ensures that you, the user, have the final say on who sees your information and for how long.

A Step-by-Step Guide to Revoking Account Aggregator Consent

Taking back your consent is straightforward. The process is designed to be simple and user-friendly. Follow these steps to manage your data-sharing permissions effectively.

Step 1: Locate Your Account Aggregator's Platform

First, you need to go where you gave the consent. This will be the app or website of the Account Aggregator (AA) you used. The lender or financial advisor (known as the Financial Information User or FIU) would have directed you to an AA to link your accounts. You must return to that same AA platform to manage your consents.

Step 2: Log In to Your Account

Open the app or website and log in to your dashboard. This usually involves using your registered mobile number and an OTP (One-Time Password) or a PIN that you set up. This security step ensures that only you can access and manage your consents.

Step 3: Find the 'Consents' Dashboard

Once you are logged in, look for a section labeled 'Consents', 'My Consents', 'Permissions', or something similar. This is your central hub for all data-sharing activities. Here, you will find a detailed log of every consent you have ever given through the platform.

This dashboard is the most important part of the AA system. It provides a clear and transparent view of your data-sharing history, including active, expired, and revoked consents.

Step 4: Identify the Specific Consent to Revoke

Your consent dashboard will show a list of permissions. Each item on the list will have key details to help you identify it:

• Who requested the data: The name of the company (FIU) that received your information.
• What data was shared: The type of accounts (e.g., savings, credit card statements).
• When it was shared: The date you gave your consent.
• Consent status: Whether it is 'Active', 'Expired', or 'Revoked'.

Scroll through this list and find the specific consent you want to cancel. For example, you might see a consent given to 'ABC Lending Company' on a specific date.

Step 5: Select the 'Revoke' Option

Next to the active consent, you will see an option to 'Revoke', 'Cancel', or a similar term. Click on this button. The system is built to act on your command immediately. Revoking is not a request; it is an instruction.

Step 6: Confirm Your Decision

A confirmation message will likely appear, asking you to confirm that you want to revoke the consent. This is a safety measure to prevent accidental cancellations. Read the prompt and confirm your choice. Once you do, the status of that consent will change to 'Revoked' on your dashboard. The data flow for that specific request stops instantly.

What Happens After You Revoke Consent?

Revoking consent has a clear and immediate effect: the Financial Information User (FIU) can no longer pull your financial data through the Account Aggregator for that specific request. Their digital key to your information is now disabled.

However, it is crucial to understand what this action does not do. Revoking consent does not delete the data that has already been shared. The company you shared it with has a copy of your information as it existed at the time they fetched it. Revocation simply prevents them from getting any new updates or pulling the data again. Your bank accounts also remain linked to the Account Aggregator, ready for you to give new consents in the future if you choose.

Common Mistakes to Avoid

The Account Aggregator India system is user-centric, but a few misunderstandings can occur. Avoid these common mistakes:

1. Confusing Unlinking with Revoking: Unlinking a bank account is different from revoking consent. Revoking stops one specific data share with one company. Unlinking removes your entire bank account from the AA platform, meaning no company can request its data until you link it again.
2. Assuming Revocation is Retroactive: Many people think revoking consent will 'pull back' the data. It doesn't. The FIU keeps the data they already received, as per the original terms of consent. The goal of revocation is to stop future access.
3. Forgetting to Review Your Dashboard: Don't just set it and forget it. Make a habit of checking your consent dashboard every few months. You might find an old, active consent you no longer need. Regular reviews put you in firm control of your data privacy.

Tips for Smart Consent Management

Using the Account Aggregator system is safe and efficient. Follow these tips to manage your data like a pro:

• Be Precise: Never give broader consent than necessary. If a lender only needs your savings account statement for the last six months, only approve that. Don't grant access to all your accounts indefinitely.
• Read the Fine Print: Before you hit 'Approve', read the consent request carefully. Check which company is asking, what data they want, and for how long they can access it.
• Check the AA's License: Only use Account Aggregators that are licensed by the Reserve Bank of India (RBI). You can find the official list on the RBI website to ensure you are using a legitimate and regulated service. Check the official RBI list of AAs.

By following these steps and tips, you can use the Account Aggregator network with confidence, knowing you hold the power to control your financial information at all times.