Consent mandate and privacy statements
A consent mandate is a form stating the client is giving the debt adviser consent to use the information they have provided. It must be easy to understand, concise and separate from any other information the client needs to review. It should avoid technical or legal jargon, unexplained abbreviations, and confusing terminology. It must be written in a manner which the client understands.
It must include the following:
•the name of the debt advice agency and the names of any other controllers who will rely on the consent; and
•why the debt adviser needs the data; and
•how the debt adviser will use the client’s data; and
•confirmation that the client can withdraw their consent at any time and, how to withdraw consent.
A privacy statement supports a consent mandate to ensure the client is aware of what will happen to the personal information they provide to the adviser.
It should include the following:
•who is responsible for the client’s information; and
•how long the information will be kept; and
•who it will be shared with; and
•what information will be collected and shared; and
•who the client can contact if they have concerns over how their information is being used.