Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_11:p15
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 11 (pt 15/36)
Character Range: 282738–285483

number of occasions;
 (b) in accordance with a direct marketing consent from the CDR consumer—disclosing CDR data to an accredited person to enable the accredited person to provide the goods or services referred to in subparagraph (a)(iv), if the CDR consumer has:
 (i) given the accredited person:
 (A) a collection consent to collect the CDR data from the accredited data recipient; and
 (B) a use consent; and
 (ii) given the accredited data recipient a disclosure consent to disclose the CDR data to the accredited person;
 (c) using the CDR data in a way and to the extent that is reasonably needed in order to send to the CDR consumer something permitted under paragraph (a) or paragraph (b) (including by analysing the CDR data to identify the appropriate information to send);
 (d) disclosing the CDR consumer's CDR data to a direct or indirect OSP of the accredited data recipient:
 (i) for the purpose of doing the things referred to in paragraphs (a), (b) or (c); and
 (ii) to the extent reasonably needed to do those things;
 (e) where the accredited data recipient is a CDR representative principal—disclosing the CDR data to a CDR representative for the purposes of a use or disclosure by the CDR representative that would be a permitted use or disclosure under paragraph (a), (c) or (d) if the CDR representative were an accredited data recipient that had collected the CDR data under the consumer data request.

7.5A  Limitation to disclosures of CDR data under a disclosure consent
 (1) Despite paragraph 7.5(1)(e), disclosure of CDR data to an accredited person under an AP disclosure consent is not a permitted use or disclosure until the earlier of the following:
 (a) 1 July 2021;
 (b) the day the Data Standards Chair makes the data standard about the matter referred to in subparagraph 8.11(1)(c)(iii).
 (2) Despite paragraph 7.5(1)(e), disclosure of CDR data to a trusted adviser under a TA disclosure consent is not a permitted use or disclosure until the earlier of the following:
 (a) 1 February 2022;
 (b) the day the Data Standards Chair makes the data standard about the matter referred to in subparagraph 8.11(1)(c)(iv).
 (3) Despite paragraph 7.5(1)(e), disclosure of a CDR insight under an insight disclosure consent is not a permitted use or disclosure until the earlier of the following:
 (a) 1 February 2022;
 (b) the day the Data Standards Chair makes the data standard about the matters referred to in subrule 8.11(1A).
 (4) Despite paragraph 7.5(1)(e), disclosure of a CDR insight under an insight disclosure consent is not a permitted use or disclosure if the CDR insight includes or reveals sensitive information within the meaning of the Privacy Act 1988.
 (5) Despite paragraph 7.5(1)(e), disclosure of