Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p21
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 21/75)
Character Range: 100093–102689

request services under rule 1.13; however, it will be required to provide a service under subrule 1.20(2).

1.20  Consumer data request service—primary data holders and secondary data holders

Primary data holders
 (1) Rule 1.13 (consumer data request service) applies in relation to a data holder for CDR data as if it were also a data holder for any SR data for which it is the primary data holder.

Secondary data holders
 (2) A secondary data holder in relation to SR data must provide an online service that:
 (a) can be used by the primary data holder to request from the secondary data holder any SR data needed to respond to an SR data request; and
 (b) enables the requested data to be disclosed to the primary data holder in machine‑readable form; and
 (c) conforms with the data standards.
Note: This subrule is a civil penalty provision (see rule 9.8).

1.21  Consumer dashboard—SR data request
  Rule 1.15 (provision of dashboard) applies in relation to an SR data request as if the primary data holder were the data holder for the requested SR data.

1.22  SR data request by a CDR consumer
Note: This rule relates to Division 3.2.
 (1) This rule applies where a CDR consumer proposes to make an SR data request.
 (2) The request must be made to the primary data holder, using the primary data holder's direct request service.

Dealing with the request
 (3) The primary data holder must, using the service mentioned in subrule 1.20(2) in accordance with the data standards, request the secondary data holder to disclose any SR data that the primary data holder needs in order to respond to the SR data request.
Note: This subrule is a civil penalty provision (see rule 9.8).
 (4) If the secondary data holder chooses to disclose the SR data requested to the primary data holder, it must do so in accordance with any relevant data standards.
Note: This subrule is a civil penalty provision (see rule 9.8).
 (5) If the secondary data holder chooses not to disclose the SR data requested to the primary data holder, it must notify the primary data holder of its refusal.
Note: This subrule is a civil penalty provision (see rule 9.8).

Responding to the request
 (6) Rule 3.4 (disclosing consumer data in response to a consumer data request) and rule 3.5 (refusal to disclose) apply as if the primary data holder were the data holder for any SR data covered by the SR data request.
 (7) Subrule 3.4(3) does not apply in relation to SR data that the secondary data holder has refused to disclose to the primary data holder.

1.23  SR data request by an accredited person
Note: This rule