How does a customer control access to their account data in Open Banking?

Access to a customer's data in Open Banking relies on the core principal of consent. A customer can provide and withdraw this consent at any time and must be given the means to do so. The Account Servicing Payment Services Provider (<a href="/glossarycollection/account-servicing-payment-service-provider" style="color:#48277C;" target="_blank" title="Account Servicing Payment Services Provider">ASPSP</a>) must be able to rely on the Third-Party Provider (<a href="/glossarycollection/third-party-provider" style="color:#48277C;" target="_blank" title="Third-Party Provider">TPP</a>) having obtained explicit consent from the customer to provide access to their online account. 

In the UK a set of standard customer journeys have been created by the Open Banking Implementation Entity (<a href="/glossarycollection/open-banking-implementation-entity" style="color:#48277C;" target="_blank" title="Open Banking Implementation Entity">OBIE</a>) in their 'Customer Experience Principles'.