{"data":{"id":"us/12-cfr-1033.401","jurisdiction":"us","citation":"12 CFR 1033.401","heading":"Third party authorization; general.","body":"To become an authorized third party, the third party must seek access to covered data from a data provider on behalf of a consumer to provide a product or service the consumer requested and:\n(a) Provide the consumer with an authorization disclosure as described in § 1033.411;\n(b) Provide a statement to the consumer in the authorization disclosure, as provided in § 1033.411(b)(5), certifying that the third party agrees to the obligations described in § 1033.421; and\n(c) Obtain the consumer's express informed consent to access covered data on behalf of the consumer by obtaining an authorization disclosure that is signed by the consumer electronically or in writing.","path":["Title 12—Banks and Banking","CHAPTER X—CONSUMER FINANCIAL PROTECTION BUREAU","PART 1033—PERSONAL FINANCIAL DATA RIGHTS","Subpart D—Authorized Third Parties"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-12.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:24:16Z","sha256":"49b032ba691facba766fb44f2447a149fa7eb9330baf9f9c73bd9e3e27c0f065","source_id":"us-cfr","stale":true,"prev":"us/12-cfr-1033.351","next":"us/12-cfr-1033.411"},"notice":"GroundRules: Original legal text. Not legal advice."}