Validate · Enforce · Trust

CMI — Insurance Data Sharing Requirements v2.15 min read

The tables below define the display, labelling, and behavioural requirements for the Insurance Data Sharing consents in the LFI Consent Management Interface (CMI). See the User Experience page for interactive wireframes of the dashboard and detail pages.

The LFI CMI shares the same structure and consent-type logic as the TPP CMI for Insurance Data Sharing, with the differences noted below. Adjustments to the requirements below are permitted provided the customer can always clearly understand what consents they have granted. Any adjustments must be documented in your CX certification submission.

01 Section

Dashboard — tabs

Paused is not a valid status in the LFI CMI. It is a TPP-local concept that is not reflected in the API Hub.

The dashboard must present Insurance Data Sharing consents across two tabs.

Rule

The Current tab must display all consents whose status is AwaitingAuthorization, Authorized, or Suspended.

The History tab must display all consents whose status is Rejected, Expired, or Revoked.

02 Section

Dashboard — filters

A filter panel must be available on the dashboard. The following three filters are required:

Filter

Options

TPP Name

Dynamically populated from the TPPs present in the customer's connections

Consent Type

Dynamically populated from the types present in the current tab

Consent State

Dynamically populated from the statuses present in the current tab

03 Section

Status labels

Consent statuses must be translated from their API values into user-friendly labels before display.

API status

Displayed label

Authorized

Active

AwaitingAuthorization

Pending

Revoked

Cancelled

Suspended

Suspended

Expired

Expired

Rejected

Rejected

05 Section

Dashboard — card content

Each Insurance Data Sharing consent card on the dashboard must show the following fields.

Field

Content

TPP name

Name of the TPP the consent was granted to

Status badge

Mapped label from Status labels

Policy count

Number of connected policies, e.g. 1 Policy Connected or 2 Policies Connected

Consent Type

Data Sharing

Last data received

Date the most recent data was retrieved under this consent

Connection expires

Date the consent expires

06 Section

Detail page

Selecting a consent on the dashboard opens its detail page. The detail page presents the same information the customer saw at the time they gave consent — the permissions, policies, and conditions that defined what they agreed to. In addition to all fields shown on the dashboard card, the detail page must show a truncated Consent ID with a copy button (format: f47ac10b...d479).

Additional sections

Section

Content

Policies

List of all insurance policies the customer has connected under this consent, each showing the policy type (e.g. Motor, Health, Life), the insurer, and the policy number

Data permissions

Expandable list of data categories the consent covers, derived from the consent's Permissions field — e.g. Policy details, Premium details, Claim details

07 Section

Detail page — action buttons

The LFI CMI does not include Pause or Reactivate buttons. These are TPP-only concepts.

Button

Label

Shown when

Revoke

Stop Sharing

Status is AwaitingAuthorization, Authorized, or Suspended

No action buttons are shown when status is Expired, Rejected, or Revoked.

08 Section

Confirmation screen

When the customer selects Revoke, replace the detail view with a single confirmation screen that includes: a title, a description of the impact of the action on the service, a Confirm button, and a Go back button.

Revoke

Title

Stop sharing

Confirm button

Confirm stop sharing

Once a customer confirms the action, the change must take effect immediately — there must be no delay between confirmation and the consent reflecting its new state. The LFI must update the consent status via the Consent Manager API.