Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p22
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 22/75)
Character Range: 102465–105085

the SR data request.
 (7) Subrule 3.4(3) does not apply in relation to SR data that the secondary data holder has refused to disclose to the primary data holder.

1.23  SR data request by an accredited person
Note: This rule relates to Subdivisions 4.2.2, 4.2.3 and 4.3.2 and Division 4.4.
 (1) This rule applies where an accredited person proposes to make an SR data request on behalf of a CDR consumer.

Making the request
 (2) The request must be made to the primary data holder, using the primary data holder's accredited person request service.

Dealing with the request
 (3) Rule 4.5 (asking CDR consumer for authorisation to disclose CDR data) applies as if the primary data holder were the data holder for any SR data covered by the SR data request.
 (4) If the CDR consumer authorises disclosure of requested data, the primary data holder must, using the service mentioned in subrule 1.20(2) and in accordance with the data standards, request the secondary data holder to disclose any SR data that the primary data holder needs in order to respond to the SR data request.
Note: This subrule is a civil penalty provision (see rule 9.8).
 (5) If the secondary data holder chooses to disclose the SR data requested to the primary data holder, it must do so in accordance with any relevant data standards.
Note: This subrule is a civil penalty provision (see rule 9.8).
 (6) If the secondary data holder chooses not to disclose the SR data requested to the primary data holder, it must notify the primary data holder of its refusal.
Note: This subrule is a civil penalty provision (see rule 9.8).

Responding to the request
 (7) Subject to subrule (8), rule 4.6 (disclosing consumer data in response to a consumer data request) applies as if the primary data holder were the data holder for any SR data covered by the SR data request.
 (8) Subrule 4.6(4) does not apply in relation to SR data that the secondary data holder has refused to disclose to the primary data holder.
 (9) Rule 4.7 (refusal to disclose) applies as if the primary data holder were the data holder for any SR data covered by the SR data request.

Notification of withdrawal of consent
 (10) Rule 4.13 (withdrawal of consent) applies as if the primary data holder were the data holder for any SR data covered by the SR data request.

Dealing with authorisations
 (11) Division 4.4 (authorisations to disclose CDR data) applies as if:
 (a) a reference to the data holder were a reference to the primary data holder; and
 (b) the following subrule were added after subrule 4.25(2) (withdrawal of authorisation by CDR consumer):
 "(3) For subrule