Implement a UK Open Banking (OBIE) AIS consent revocation flow covering both TPP-initiated and bank-initiated revocation

Steps

1. Build a consent management dashboard per OBIE Customer Experience Guidelines that lets the PSU view, search, and revoke each active account-access-consent
2. On PSU-initiated revocation in your dashboard, call DELETE on the account-access-consent resource at the ASPSP as soon as practically possible
3. Separately handle bank-initiated revocation — where the PSU cancels access directly in their online banking rather than through your dashboard — by detecting failed/401-403 responses on subsequent data calls or refresh attempts rather than assuming you'll be proactively notified
4. On either revocation path, immediately stop further data pulls tied to that consent and apply your data-retention policy to any previously cached data
5. Send the PSU a written confirmation (e.g. email) of the revocation in addition to on-screen confirmation, since OBIE customer research found this the preferred experience
6. Log the revocation event with a timestamp and trigger source for audit and complaint-handling purposes