Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p57
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 57/75)
Character Range: 190000–192868

has made a consumer data request to a CDR participant on behalf of a CDR representative, based on a collection consent given under this Division relating to particular CDR data and a particular CDR participant; and
 (b) the request has not been completely resolved; and
 (c) the CDR consumer amends the consent.
 (2) The CDR representative principal must notify:
 (a) if the CDR participant is a data holder―the data holder, in accordance with the data standards, that the consent has been amended; and
 (b) if the CDR participant is an accredited data recipient―the accredited data recipient as soon as practicable that the consent has been amended.
Note: This subrule is a civil penalty provision (see rule 9.8).

4.20T  Updating consumer dashboard
 (1) A CDR representative must inform the CDR representative principal as soon as practicable after the information required to be contained on the CDR representative principal's consumer dashboard changes.
Note: The CDR representative principal may allow the CDR representative to provide the consumer dashboard on its behalf—see subrule 1.14(5).
 (2) The CDR representative principal must, as soon as practicable, make those changes.
Note 1: This subrule is a civil penalty provision (see rule 9.8).
Note 2: The CDR representative principal could arrange for the CDR representative to update the consumer dashboard on the CDR representative principal's behalf: see subrule 4.19(2).

4.20U  Ongoing notification requirement—current consents
 (1) This rule applies in relation to a collection consent, use consent or disclosure consent given under this Division if:
 (a) the consent is current; and
 (b) 90 days have elapsed since the latest of the following:
 (i) the CDR consumer gave the consent;
 (ii) the CDR consumer last amended the consent;
 (iii) the CDR consumer last used the CDR representative principal's consumer dashboard;
 (iv) the CDR representative or the CDR representative principal last notified the CDR consumer that the consent is still current.
 (2) The CDR representative must notify the CDR consumer, in relation to each consent given by the CDR consumer that is still current, that the consent is still current.
Note: A failure to do this could make the CDR representative principal liable for a civil penalty (see rule 1.16A).
 (3) The notification must be given in accordance with the data standards.
Note: A failure to do this could make the CDR representative principal liable for a civil penalty (see rule 1.16A).

Division 4.4—Authorisations to disclose CDR data
Note: Under rule 4.5, if a data holder is considering disclosing voluntary consumer data in response to a consumer data request, or if required consumer data was requested, the data holder must seek an authorisation from the CDR consumer to disclose the CDR data in accordance with (among other things) this Division, and