Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_11:p8
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 11 (pt 8/36)
Character Range: 265199–268154

the period of application.
 (3) Before, or as soon as practicable after, giving a direction, the Accreditation Registrar must give the accredited person or data holder a reasonable opportunity to be heard in relation to the matter.
 (4) Despite anything else in these rules:
 (a) an accredited person must not make a consumer data request contrary to a direction it has received under this rule; and
 (b) a data holder must not disclose CDR data in response to a consumer data request contrary to a direction it has received under this rule.
  Civil penalty:
 (a) for an individual―$50,000; and
 (b) for a body corporate―$250,000.

Part 6—Rules relating to dispute resolution

6.1  Requirement for data holders―internal dispute resolution
  A data holder in relation to a particular designated sector must meet the internal dispute resolution requirements in relation to that sector.
Note 1: See rule 1.7 for the meaning of "meets the internal dispute resolution requirements".  See also:
                  for the banking sector—clause 5.1 of Schedule 3;
                  for the energy sector—clause 5.1 of Schedule 4.
Note 2: An accredited person must also meet those internal dispute resolution requirements: see paragraph 5.12(1)(b).
Note 3: This rule is a civil penalty provision (see rule 9.8).

6.2  Requirement for data holders―external dispute resolution
  A data holder must meet the external dispute resolution requirements for each designated sector in which the data the holder operates.
Note 1: See the definition of "recognised external dispute resolution scheme" in subrule 1.7(1), and see subrule 1.7(3) for the interpretation of references to "data holder".
Note 2: An accredited person must also meet the external dispute resolution requirements: see paragraph 5.12(1)(c). See also:
                  for the banking sector—clause 5.2 of Schedule 3;
                  for the energy sector—clause 5.2 of Schedule 4.
Note 3: This rule is a civil penalty provision (see rule 9.8).

Part 7—Rules relating to privacy safeguards

Division 7.1—Preliminary

7.1  Simplified outline of this Part

      The privacy safeguards are an additional protection given to CDR data under Part IVD of the Act. The privacy safeguards apply only to CDR data for which there are one or more CDR consumers (such as required consumer data and voluntary consumer data); they do not apply to CDR data for which there are no CDR consumers (such as required product data and voluntary product data).
      Several of the privacy safeguards depend on matters specified in these rules for their operation. This Part sets out the rules that relate to the privacy safeguards.
      This Part also sets out some additional civil penalty provisions that protect the privacy or confidentiality of CDR consumers' CDR data.

Division 7.2—Rules relating to privacy safeguards

Subdivision 7.2.1—Rules relating to consideration of CDR data privacy

7.2  Rule relating