The Financial Market Commission (CMF) has launched a second public consultation to amend the consent regime applicable to access to information contained in the Consolidated Debt Registry (REDEC).

Beyond the specific regulatory adjustments, this process reflects a deeper transformation: financial consent is evolving toward a model that requires greater traceability, verifiability, and manageability in digital environments.

In this context, financial institutions—including banks, fintechs, cooperatives, issuers, credit platforms, and technology providers—will need to review and strengthen their internal practices, particularly in areas such as:

• The generation and safekeeping of digital evidence of consent;
• The traceability of its granting and revocation;
• The integrity and retention of related documents;
• Mechanisms for accessing financial information;
• The use of APIs and technological controls;
• Coordination among legal, compliance, risk, and technology teams.

The development of REDEC is thus emerging as a relevant practical case for the application of personal data protection principles in the credit sector, within an increasingly digitalized financial market, where consent is no longer a formal act but rather a robust, auditable process central to regulatory risk management.