Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p73
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 73/75)
Character Range: 231261–233965

the person operates; and
 (d) have addresses for service; and
 (e) if the applicant is a foreign entity—have a local agent that has addresses for service; and
 (f) ensure that it is licensed or otherwise authorised to use any CDR logo, including as required by the data standards.
Note 1: See sector Schedules for how this provision might operate differently for different designated sectors.
Note 2: For the banking sector, see clause 7.4 of Schedule 3.
Note 3: For paragraph (a), the steps outlined in Schedule 2 relate to privacy safeguard 12 (see subsection 56EO(1) of the Act and rule 7.11 of these rules).
Note 4: For paragraph (b), see rule 1.7 for the meaning of "meet the internal dispute resolution requirements".  See also:
                  for the banking sector—clause 5.1 of Schedule 3;
                  for the energy sector—clause 5.1 of Schedule 4.
Note 5: For paragraph (c), see rule 1.7 for the meaning of "meet the external dispute resolution requirements".  See also:
                  for the banking sector—clause 5.2 of Schedule 3;
                  for the energy sector—clause 5.2 of Schedule 4.
Note 6: For paragraphs (d) and (e), see rule 1.7 for the meaning of "addresses for service".
Note 7: This subrule is a civil penalty provision (see rule 9.8).
 (2) An accredited person must:
 (a) be, having regard to the fit and proper person criteria, a fit and proper person to be accredited at that level; and
 (b) have adequate insurance, or a comparable guarantee, in light of the risk of CDR consumers not being properly compensated for any loss that might reasonably be expected to arise from a breach of obligations under any of the following to the extent that they are relevant to the management of CDR data:
 (i) the Act;
 (ii) any regulation made for the purposes of the Act;
 (iii) these rules.

5.13  Accredited person must comply with conditions
  An accredited person must comply with the conditions of their accreditation.
Note 1: This rule applies to the default conditions set out in Schedule 1 and any conditions imposed or varied under rule 5.10.
Note 2: This rule is a civil penalty provision (see rule 9.8).

5.14  Notification requirements

General
 (1) An accredited person must notify the Data Recipient Accreditor within 5 business days if any of the following occurs:
 (a) any material change in its circumstances that might affect its ability to comply with its obligations under this Subdivision;
 (b) any matter that could be relevant to a decision as to whether the person is, having regard to the fit and proper person criteria, a fit and proper person to be accredited at the person's level of accreditation;
 (c) there is a change to, or the