Document ID: chunk:federal_register_of_legislation:F2025L00272:clause:1_2:p4
Version: federal_register_of_legislation:F2025L00272
Segment Type: clause
Provision Reference: sch 1 cl 2 (pt 4/4)
Character Range: 33917–35902

a novated lease).
 (4) Subject to this clause, CDR data is voluntary consumer data in relation to the banking sector or the NBL sector if:
 (a) there is at least one CDR consumer for the CDR data; and
 (b) the CDR data relates to a covered product; and
 (c) the CDR data is not required consumer data.
 (5) However:
 (a) CDR data is neither required consumer data nor voluntary consumer data at a particular time if the data is:
 (i) account data, transaction data or product specific data in relation to a joint account or partnership account for which any of the individuals who are account holders or partners in the relevant partnership is less than 18 years of age at that time; or
 (ii) CDR data relating to a debt of a CDR consumer, if the data was acquired by a data holder acting in its capacity as a debt collector or debt buyer; and
 (b) for a consumer data request made by or on behalf of a particular person, customer data in relation to any account holder or secondary user other than that person is neither required consumer data nor voluntary consumer data.

Exception to required consumer data―open accounts
 (6) Despite subclause (2), if a relevant account is open at a particular time, CDR data relating to that account is not required consumer data at that time if the data is:
 (a) transaction data in relation to a transaction that occurred more than 2 years before that time; or
 (b) account data that relates to an authorisation for a direct debit from the account, if the direct debit occurred more than 13 months before that time.
Note: As a result, such CDR data would be voluntary consumer data unless otherwise excluded by this clause.

Exception to required consumer data―closed accounts
 (7) Despite subclause (2), if a relevant account is closed at a particular time, CDR data relating to that account is not required consumer data at that time.
Note: As a result, such CDR data would be voluntary consumer data unless otherwise excluded by this clause.