---
kind: "section"
citation: "12 C.F.R. § 1033.401"
title: "12"
number: "1033.401"
heading: "Third party authorization; general."
url: "https://uscodex.org/cfr/12/1033.401"
---

# §1033.401. Third party authorization; general.


To become an authorized third party, the third party must seek access to covered data from a data provider on behalf of a consumer to provide a product or service the consumer requested and:

- (a) Provide the consumer with an authorization disclosure as described in [§ 1033.411](/cfr/12/1033.411.md);
- (b) Provide a statement to the consumer in the authorization disclosure, as provided in [§ 1033.411(b)(5)](/cfr/12/1033.411.md?p=b-5), certifying that the third party agrees to the obligations described in [§ 1033.421](/cfr/12/1033.421.md); and
- (c) Obtain the consumer's express informed consent to access covered data on behalf of the consumer by obtaining an authorization disclosure that is signed by the consumer electronically or in writing.

## Notes

### Authority

Authority: 12 U.S.C. 5512; 12 U.S.C. 5514; 12 U.S.C. 5533.

### Source

Source: 89 FR 90989, Nov. 18, 2024, unless otherwise noted.