Document ID: chunk:federal_register_of_legislation:F2020L01688:clause:1_44:p8
Version: federal_register_of_legislation:F2020L01688
Segment Type: clause
Provision Reference: sch 1 cl 44 (pt 8/9)
Character Range: 51456–54164

Subdivision 4.3.5—Notification requirements

4.18  CDR receipts
 (1) The accredited person must give the CDR consumer a notice that complies with this rule (a CDR receipt) as soon as practicable after:
 (a) the CDR consumer gives the accredited person a collection consent, a use consent or a disclosure consent; or
 (aa) the CDR consumer amends such a consent in accordance with this Part; or
 (b) the CDR consumer withdraws such a consent in accordance with rule 4.13
Note: This subrule is a civil penalty provision (see rule 9.8).
 (2) A CDR receipt given for the purposes of paragraph (1)(a) must set out:
 (a) the details that relate to the consent that are listed in paragraphs 1.14(3)(a) to (f); and
 (b) in the case of a collection consent―the name of each CDR participant the CDR consumer has consented to the collection of CDR data from; and
 (ba) in the case of a disclosure consent―the name of the person the CDR consumer has consented to the disclosure of CDR data to; and
 (c) any other information the accredited person provided to the CDR consumer when obtaining the consent (see rule 4.11).
 (2A) A CDR receipt given for the purposes of paragraph (1)(aa) must set out details of each amendment that has been made to the consent.
 (3) A CDR receipt given for the purposes of paragraph (1)(b) must set out when the consent expired.
 (4) A CDR receipt must be given in writing otherwise than through the CDR consumer's consumer dashboard.
 (5) A copy of the CDR receipt may be included in the CDR consumer's consumer dashboard.

4.18A  Notification if collection consent expires
 (1) This rule applies if, in relation to particular goods or services an accredited person is providing as referred to in subrule 4.3(1):
 (a) the collection consent expires; but
 (b) the use consent is current.
 (2) The accredited person must notify the CDR consumer as soon as practicable that, at any time, they:
 (a) may withdraw the use consent; and
 (b) may make the election to delete redundant data in respect of that CDR data under rule 4.16.
Note: This subrule is a civil penalty provision (see rule 9.8).
 (3) The notification must be given in writing otherwise than through the CDR consumer's consumer dashboard.
 (4) The notification may also be included in the CDR consumer's consumer dashboard.

4.18B  Notification if collection consent or AP disclosure consent expires
 (1) This rule applies if:
 (a) an accredited person has a collection consent relating to particular CDR data and a particular accredited data recipient; and
 (b) the accredited data recipient has an AP disclosure consent relating to that CDR data and that accredited person.
 (2) If the collection consent expires in accordance