Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p5
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 5/75)
Character Range: 60137–62857

of an OSP chain principal, means any CDR data of a CDR consumer of the OSP chain principal held by the person that:
 (a) was disclosed to the person by the OSP chain principal for the purposes of the relevant CDR outsourcing arrangement; or
 (b) was collected from a CDR participant by the person on behalf of the OSP chain principal in accordance with the relevant CDR outsourcing arrangement; or
 (c) was disclosed to the person by another direct or indirect OSP of the OSP chain principal in accordance with the relevant CDR outsourcing arrangement for the other direct or indirect OSP; or
 (d) is directly or indirectly derived from such CDR data.
Note: Service data may be disclosed to other direct or indirect OSPs in accordance with provisions in the relevant CDR outsourcing arrangements.
 (7) For paragraph (6)(a), where an accredited person gives a direct or indirect OSP (the provider) permission to access or use CDR data collected by the provider on behalf of the OSP chain principal in accordance with subparagraph (3)(a)(i), the accredited person is taken to disclose the CDR data to the provider.

1.10AA  Meaning of CDR representative and related terms
Note: From the point of view of a CDR consumer who is the customer of a CDR representative, the consumer deals with the CDR representative, as if it were an accredited person, and might not deal with the CDR representative principal at all. The consumer requests the goods or services from the CDR representative; the CDR representative identifies the CDR data that it needs in order to provide the goods and services; the consumer gives their consent to the CDR representative for the collection and use of the CDR data. The consumer is informed that the CDR representative principal will do the actual collecting, but as a background detail.
 A CDR representative cannot deal with a person in their capacity as a CDR business consumer.
 (1) In these rules, a CDR representative arrangement is a written contract between a person with unrestricted accreditation (the CDR representative principal) and a person without accreditation (the CDR representative):
 (a) under which the CDR representative will offer goods and services to CDR consumers, but not in their capacity as CDR business consumers, for which it will need to use or disclose CDR data of the CDR consumer; and
 (b) under which, where the CDR representative has obtained the consent of a CDR consumer to the collection, use and disclosure of CDR data in accordance with rule 4.3A:
 (i) the CDR representative principal will:
 (A) make any appropriate consumer data request; and
 (B) disclose the relevant CDR data to the CDR representative; and
 (ii) the CDR representative will use or