Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p54
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 54/75)
Character Range: 182147–185028

is notified of the first‑mentioned expiry.
Note: The notification is required by rule 4.18B.
 (4) If a CDR representative principal's accreditation is revoked or surrendered in accordance with rule 5.17, all of the consents of any of the CDR representative principal's CDR representatives expire when the revocation or surrender takes effect.

Subdivision 4.3A.6—Information relating to de‑identification of CDR data

4.20L  Additional information relating to de‑identification of CDR data
  For paragraph 4.20E(3)(i), the additional information relating to de‑identification is the following:
 (a) what the CDR data de‑identification process is;
 (b) if it would disclose (by sale or otherwise) the de‑identified data to one or more other persons;
 (i) that fact; and
 (ii) the classes of persons to which it would disclose that data; and
 (iii) why it would so disclose that data;
 (c) if the CDR representative would use the de‑identified data for general research―that fact, together with a link to a description in the CDR representative principal's CDR policy of:
 (i) the research to be conducted; and
 (ii) any additional benefit to be provided to the CDR consumer for consenting to the use;
 (e) that the CDR consumer would not be able to elect, in accordance with rule 4.20M, to have the de‑identified data deleted once it becomes redundant data.

Subdivision 4.3A.7—Election to delete redundant data

4.20M  Election to delete redundant data
 (1) The CDR consumer who gives a consent relating to particular CDR data may:
 (a) when giving the consent; or
 (b) at any other time before the consent expires;
elect that the collected data, and any CDR data directly or indirectly derived from it, be deleted when it becomes redundant data.
Note 1: See rules 7.12 and 7.13 for the effect of an election.
Note 2: CDR data might become redundant data even before a consent expires.
 (2) The CDR consumer may make the election:
 (a) by communicating it to the CDR representative principal or CDR representative in writing; or
 (b) by using the CDR representative principal's consumer dashboard.
Note: The CDR representative principal may allow the CDR representative to provide the consumer dashboard on its behalf—see subrule 1.14(5).
 (3) This rule does not apply if the CDR representative:
 (a) has a general policy of deleting redundant data; and
 (b) when seeking the consent, informs the CDR consumer that their CDR data will be deleted when it becomes redundant data.
Note: See paragraph 4.20N(1)(a).
 (4) This rule does not require the deletion of directly or indirectly derived CDR data that was de‑identified in accordance with the CDR data de‑identification process before the collected data from which it was derived became redundant.

4.20N  Information relating to redundant data
 (1) For subparagraph 4.20E(3)(n)(i), the CDR representative must state whether they