Document ID: chunk:federal_register_of_legislation:C2024C00820:section:19:p2
Version: federal_register_of_legislation:C2024C00820
Segment Type: section
Provision Reference: s 19 (pt 2/3)
Character Range: 74922–77536

sharing is being done through an ADSP, the agreement must:
 (a) specify any data services the ADSP is to perform in relation to public sector data shared with the ADSP by the data custodian; and
 (b) specify the circumstances in which the ADSP is to share, with the accredited user on behalf of the data custodian, ADSP‑enhanced data of the project; and
 (c) prohibit the ADSP from providing access to, or releasing, the ADSP‑enhanced data in any other circumstances other than circumstances (if any) specified in the agreement.
 (8A) For the purposes of paragraph (8)(c), the only other circumstances that may be specified in the agreement are those allowed by section 20A.
 (9) The agreement must:
 (a) describe in general terms the use to be made by the accredited user of the output of the project; and
 (b) prohibit the accredited user from using the output in a way that is inconsistent with the description; and
 (c) prohibit the accredited user from providing access to, or releasing, the output in any circumstances other than circumstances (if any) specified in the agreement.
 (10) For the purposes of paragraph (9)(c), the only circumstances that may be specified in the agreement are those allowed by section 20A, 20B, 20C or 20D.
 (11) The agreement must prohibit the accredited entities that are party to the agreement from doing anything inconsistent with the conditions of accreditation imposed on or applicable to the entity from time to time.
 (12) If section 37 applies in relation to sharing under the agreement and the agreement does not provide that subsections 37(2) and (3) are not to apply, the agreement must specify that those subsections apply.
 (12A) If the parties agree to responsibilities in relation to data breaches additional to those under Part 3.3, the agreement must set out those responsibilities.
 (13) The agreement must specify the circumstances in which it may be varied or terminated and how a variation or termination is to be done.
 (14) The agreement must specify either or both of the following:
 (a) its duration;
 (b) the intervals at which the parties must review it.
 (15) The agreement must provide for how scheme data covered by the agreement is to be dealt with when the agreement ends.
 (16) The agreement must meet any other requirements prescribed by a data code for the purposes of this subsection.
 (17) The agreement must require the data custodian of the source data to give the Commissioner written notice of the cessation of the agreement, as soon as practicable after the agreement ceases be in effect.

Part 2.7—Allowed access to output of project