How onward sharing works

Once you’ve connected a data holder to openfeed, sharing that data with an app takes a single screen — no bank login, no OTP, no re-consent. This guide walks through exactly what happens when you share, what an app can and can’t see, and how to turn it off.

What happens when you share

1. You open an app’s consent screen (often directly from the app itself).
2. You pick exactly which accounts the app may see.
3. You confirm. The app immediately gains read access to the selected data.

Because the data is already in openfeed, there is no new CDR Sharing Arrangement. The onward sharing is governed by the Privacy Act.

What the app can — and can’t — do

When you share, the app receives access only to the data openfeed is holding.

• Readonly: An app can see the data you shared. It can’t move money, change anything, or act on your accounts.
• Only the accounts you picked: Sharing is per account, not all-or-nothing. An app never sees accounts you didn’t select.
• Your passwords stay private: No app, including openfeed, ever sees your bank or energy provider login details.
• Can’t reconnect your provider: An app can’t touch your underlying connection to the data holder - only you can.

Your Sharing view

Everything you’ve connected and everything you’ve shared lives in one place:

• Data sources: Each bank and energy provider you have linked to openfeed.
• Applications: Every app you’ve shared with, and how many accounts each one can see.

Editing and revoking

From your Applications view you can:

• Edit which accounts an app can see, narrow it down or add another account, and
• Revoke the app entirely. Revoking an app takes effect immediately and never touches your underlying CDR connections. The other apps you’ve shared with keep working, and you can share with a new app straight away without reconnecting anything.