Document ID: chunk:federal_register_of_legislation:F2020L01688:clause:1_44:p6
Version: federal_register_of_legislation:F2020L01688
Segment Type: clause
Provision Reference: sch 1 cl 44 (pt 6/9)
Character Range: 46335–49156

withdrawn in accordance with paragraph 4.13(1)(a)―when the consent was withdrawn;
 (d) the end of the period of 12 months after:
 (i) the consent was given; or
 (ii) if the period of the consent has been amended in accordance with this Subdivision―the consent was last amended;
 (e) at the end of the period the CDR consumer consented to in accordance with rule 4.11;
 (f) if the consent expires as a result of the operation of another provision of these rules that references this paragraph.
Note: Clause 7.2 of Schedule 3 is an example of a provision referencing paragraph (f). This relates to when an accredited data recipient of CDR data becomes instead a data holder of that CDR data.
 (1A)  If:
 (a) an accredited person is notified, under paragraph 4.25(2)(b), of the withdrawal of an authorisation to disclose CDR data; and
 (b) the collection consent has not expired in accordance with subrule (1);
  the collection consent to collect that CDR data expires when the accredited person receives that notification.
Note: This would not result in the use consent relating to any CDR data that had already been collected expiring. However, see the notification requirement of rule 4.18A.
 (1B) If:
 (a) an accredited person has a collection consent to collect particular CDR data from a particular accredited data recipient; and
 (b) the accredited data recipient has an AP disclosure consent to disclose that CDR data to that accredited person;
  then if one of those consents expires, the other expires when the accredited person or accredited data recipient is notified of the first‑mentioned expiry.
 (1C) If an accredited person becomes a data holder, rather than an accredited data recipient, of particular CDR data as a result of subsection 56AJ(4) of the Act, all of that accredited person's consents given under these rules that relate to that CDR data expire.
 (2) If an accredited person's accreditation is revoked or surrendered in accordance with rule 5.17, all of the accredited person's consents expire when the revocation or surrender takes effect.

Subdivision 4.3.3—Information relating to de‑identification of CDR data

4.15  Additional information relating to de‑identification of CDR data
  For paragraph 4.11(3)(e), the additional information relating to de‑identification is the following:
 (a) what the CDR data de‑identification process is;
 (b) if it would disclose (by sale or otherwise) the de‑identified data to one or more other persons;
 (i) that fact; and
 (ii) the classes of persons to which it would disclose that data;
 (iii) why it would so disclose that data;
 (c) if the accredited person would use the de‑identified data for general research―that fact, together with a link to a description in the accredited person's CDR policy of:
 (i) the research to be conducted; and
 (ii)