Skip to main content
GET
/
records
List Own Access Records
curl --request GET \
  --url https://api.central.consent/v1/records \
  --header 'Authorization: Bearer <token>'
{
  "response": {
    "resource": "/v1/access-records/ak_691df0c788ca043403b7fa90",
    "timestamp": "2026-03-11T12:00:00Z",
    "transaction-id": "tid_691df0c788ca043403b7fa90"
  },
  "records": [
    {
      "ak": "ak_691df0c788ca043403b7fa90",
      "data-types": [
        "HH-CONSUMPTION"
      ],
      "state": "ACTIVE",
      "lead-controller-name": "Bright Energy Ltd",
      "arrangement-type": "sole",
      "controller-count": 1,
      "record-metadata": {
        "schema-version": "1.0",
        "controller-arrangement": {
          "arrangement-type": "sole",
          "controllers": [
            {
              "name": "Bright Energy Ltd",
              "role": "sole",
              "contact-url": "https://bright-energy.com/contact",
              "address": {
                "addressLine1": "221B Baker Street",
                "townCity": "London",
                "postcode": "NW1 6XE",
                "addressLine2": "Marylebone",
                "county": "Greater London"
              },
              "privacy-rights-url": "https://bright-energy.com/your-rights",
              "lia-reference": "LIA-2024-003",
              "statutory-reference": "Energy Act 2023, s.147",
              "storage-conditions": {
                "location": "GB",
                "retention-period": "P2Y"
              }
            }
          ],
          "art26-reference": "JCA-2024-BrightGrid-001"
        },
        "record-identifier": "ak_691df0c788ca043403b7fa90",
        "created-at": "2024-01-15T09:30:00Z",
        "identity-record-ref": "ir_a3c5e7f9b1d3a3c5e7f9b1d3"
      },
      "legal-basis": "uk-consent",
      "purpose": "Energy efficiency analysis and tariff recommendations",
      "expiry": "2023-11-07T05:31:56Z",
      "discovered-access": {
        "mpxn": "1234567890123",
        "organisation-name": "Acme Energy Services Ltd",
        "organisation-reference": "org_abc123def456",
        "first-seen": "2024-06-01",
        "data-types-observed": [
          "HH-CONSUMPTION"
        ],
        "source-reference": "DCC-TX-LOG-2026-03-001",
        "last-seen": "2026-02-28",
        "superseded-by": "ak_691df0c788ca043403b7fa90"
      }
    }
  ],
  "total": 123
}

Authorizations

​
Authorization
string
header
required

JWT from GET /auth/token. Pass as Authorization: Bearer <token>. Expires after 7200s.

Query Parameters

​
legal-basis
enum<string>

Filter by legal basis. The legal basis under which the Controller accesses customer data.

Consent bases — notice and access-event.consent must be populated.

ValuePlain nameArticle
uk-consentUK ConsentUK GDPR Art. 6(1)(a)
uk-explicit-consentUK Explicit ConsentUK GDPR Art. 9(2)(a)

Non-consent bases — notice and access-event.consent must be null.

ValuePlain nameArticleSupporting field (on lead controller)
uk-legitimate-interestsUK Legitimate InterestsUK GDPR Art. 6(1)(f)lia-reference
uk-public-taskUK Public TaskUK GDPR Art. 6(1)(e)statutory-reference
uk-legal-obligationUK Legal ObligationUK GDPR Art. 6(1)(c)statutory-reference
uk-contractUK ContractUK GDPR Art. 6(1)(b)—
Available options:
uk-consent,
uk-explicit-consent,
uk-legitimate-interests,
uk-public-task,
uk-legal-obligation,
uk-contract
Example:

"uk-consent"

​
limit
integer
default:200

Maximum number of records to return.

Required range: x <= 500

Response

List of own access records.

​
response
object
required
​
records
object[]
required
​
total
integer
required
Last modified on March 25, 2026