Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleScope & Constraints
cope

Scope

Internal Services

These are Moniepoint's internal services that may need to request user consent for sensitive actions. Examples include:

Team

Consented Feature

Offline Sales

BO Remapping

Trust and Account

Profile Management

External Services

These are third-party services that may require access to Moniepoint users’ accounts for data or payment purposes. Examples include:

Team

Consented Feature

NIBSS

Direct Debit

Third-party Lenders

Data Access (e.g., Renmoney, Carbon)

Account Statement Services

Account Statement Requests


Constraints

  1. Transparency:

  2. Each consent request must inform the customer:

    • Who the requesting client is

    • The specific action the client wants to perform on their account.

  3. Action Specificity:

  4. Systems requesting consent must only be allowed to carry out the specific action tied to the consent request.

  5. Single-Use Consent:

  6. The first version (v1) of this feature will focus solely on one-time, single-use consent requests.

  7. Communication Constraints:

    • SMS Notifications: Messages must be under 150 characters.

    • Push Notifications: Limited to 250 characters.

    • USSD Screens: Maximum display of 150 characters.

Reviewed by

Status

...

Expand
titleTracking & analytics

Mixpanel

We need to set up the following event to track user interactions with Consent Management on the bannerapp:

Event name

Description

Attribute(s)

consent_requested

This event is fired when the client requests consent from user

Product: What product are they requesting consent for

Type: is it revocable or not

Where: personal app, business app, web, consent link?

consent_approved

This event is fired when the Moniepoint user approves the consent request

Product: What product are they requesting consent for

Type: is it revocable or not

Where: personal app, business app, web, consent link?

consent_rejected

This event is fired when the Moniepoint user rejects the consent request

Product: What product are they requesting consent for

Type: is it revocable or not

Where: personal app, business app, web, consent link?

...