Sharing data is completely customer's choice. If customer decide to stop sharing data, bank won’t send any more data to the third-party providers (TPP). However, the data bank have shared while customer did give their permission may still be stored by the third party – customer should contact them to understand what they will use it for.

Customer can manage and amend their permission at any time using HBZ web or Mobile banking portal They can also share their bank's data, which they can revert whenever they change their mind.

There are two ways to share data with third-party providers (TPPs).

• Sharing data through Open Banking
  If a registered third party is using Open Banking to access customer data, they’ll always tell customer what data they need, why they need it, and will ask customer to give their permission. They’ll then pass that to the bank, either via HBZ web banking or Mobile banking app, where bank will cater their request and ask the customer to confirm permission. Once permission is granted, bank will share that data with the third party on customer's behalf.
  
  
• Sharing data by giving out log-in details
  Outside Open Banking, some providers might ask the customer to share their log-in details as a part of their data sharing solution. If customer decide to give them their details, they will be able to log in to customer account as if they are the customer, which is called screen scraping. This means that the company could access a wider range of information.