Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p15
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 15/75)
Character Range: 84847–87552

(i) on a single occasion; or
 (ii) over a period of time;
 (e) if a collection consent or disclosure consent applies over a period of time:
 (i) what that period is; and
 (ii) how often data has been, and is expected to be, collected or disclosed over that period;
 (ea) for an insight disclosure consent—a description of the CDR insight and to whom it was disclosed;
 (eb) if a business consumer statement has been given in relation to the consent—that fact;
 (f) if the consent is current—when it is scheduled to expire;
 (g) if the consent is not current—when it expired;
 (h) information relating to CDR data that was collected or disclosed pursuant to the consent (see rules 7.4 and 7.9);
 (ha) if the accredited person is an affiliate and the CDR data will be collected by a sponsor at its request:
 (i) the sponsor's name; and
 (ii) the sponsor's accreditation number;
 (i) details of each amendment (if any) that has been made to the consent.
Note 1: For paragraph (f), consents expire at the latest 12 months (or 7 years for certain consents by a CDR business consumer) after they are given or, in some circumstances, amended: see paragraph 4.14(1)(c).
Note 2:  For limits on the specific uses that are possible, see the data minimisation principle (rule 1.8).
Note 3: The consumer dashboard could contain other information too, for example, the written notices referred to in rule 7.15 (which deals with correction requests under privacy safeguard 13, section 56EP of the Act).
 (3A) For paragraph (1)(b), the other information is:
 (a) a statement that the CDR consumer is entitled to request further records in accordance with rule 9.5; and
 (b) information about how to make such a request.
 (4) An accredited person does not contravene paragraph (1)(f) if the accredited person takes reasonable steps to ensure that the online service complies with that paragraph.

Dashboard in relation to CDR representative
 (5) Where a CDR representative principal makes a consumer data request at the request of a CDR representative, it may arrange for the CDR representative to provide the consumer dashboard on its behalf.

1.15  Consumer dashboard—data holder
 (1) If a data holder receives a consumer data request from an accredited person on behalf of a CDR consumer, the data holder must, in the circumstances specified in a sector Schedule, ensure that it provides the CDR consumer with an online service that:
 (a) can be used by the CDR consumer to manage authorisations to disclose CDR data in response to consumer data requests; and
 (b) contains the details of each authorisation to disclose CDR data specified in subrule (3); and
 (ba) contains any information in the data standards that is