Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p9
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 9/75)
Character Range: 70034–72733

an accredited data recipient, or a CDR representative that holds the CDR data as service data, is a disclosure consent given by the CDR consumer under these rules that:
 (a) authorises the accredited data recipient or CDR representative to disclose the CDR data to a specified person for one or more of the following purposes:
 (i) verifying the consumer's identity;
 (ii) verifying the consumer's account balance;
 (iii) verifying the details of credits to or debits from the consumer's accounts; but
 (b) where the CDR data relates to more than one transaction—does not authorise the accredited data recipient or CDR representative to disclose an amount or date in relation to any individual transaction.
 (4) An accredited person must not make:
 (a) the giving of an insight disclosure consent; or
 (b) the specification of a particular person for the purposes of paragraph (3)(a);
a condition for supply of the goods or services requested by the CDR consumer.
Note: This subrule is a civil penalty provision (see rule 9.8).
 (5) A CDR representative must not make:
 (a) the giving of an insight disclosure consent; or
 (b) the specification of a particular person for the purposes of paragraph (3)(a);
a condition for supply of the goods or services requested by the CDR consumer.
 (6) A CDR representative principal contravenes this subrule if its CDR representative makes:
 (a) the giving of an insight disclosure consent; or
 (b) the specification of a particular person for the purposes of paragraph (3)(a);
a condition for supply of the goods or services requested by the CDR consumer.
Note: This subrule is a civil penalty provision (see rule 9.8).
 (7) To avoid doubt, paragraphs (4)(a), (5)(a) and (6)(a) do not apply where the only good or service that is requested by the CDR consumer is for CDR data to be collected from a data holder and CDR insights disclosed in accordance with the insight disclosure consent.

Consents in relation to CDR representatives
 (8) For an accredited person with a CDR representative, a consent given by a CDR consumer under these rules to the CDR representative for the accredited person to collect particular CDR data from a CDR participant for that CDR data and disclose it to the CDR representative is also a collection consent.

CDR business consumers
 (9) For these rules, a CDR consumer is taken to be a CDR business consumer in relation to a consumer data request to be made by an accredited person if the accredited person has taken reasonable steps to confirm that:
 (a) the CDR consumer is not an individual; or
 (b) the CDR consumer has an active ABN.
 (10) For these rules, a business consumer statement is a statement made by a CDR business