Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p14
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 14/75)
Character Range: 82339–85054

not have a nominated representative will not be able to give or amend authorisations, or use the dashboard to manage authorisations (see subrule 1.15(2A)), and accordingly, the data holder will be neither required nor permitted to disclose the requested CDR data under these rules.
Note 4: To avoid doubt, a service may be offered in an online form even if this subrule does not require it to be an online service.
Note 5: This subrule is a civil penalty provision (see rule 9.8).
 (2) The service referred to in paragraph (1)(a) is the data holder's direct request service.
 (3) The service referred to in paragraph (1)(b) is the data holder's accredited person request service.
 (4) A data holder does not contravene subrule (1) in relation to subparagraph (1)(a)(ii) so long as it takes reasonable steps to ensure that the online service complies with that subparagraph.

Subdivision 1.4.3—Services for managing consumer data requests made by accredited persons

1.14  Consumer dashboard—accredited person
 (1) Subject to subrule (5), an accredited person must provide each eligible CDR consumer on whose behalf the accredited person makes a consumer data request with an online service that:
 (a) can be used by the CDR consumer to manage:
 (i) such requests; and
 (ii) associated consents; and
 (b) contains the details of each consent specified in subrule (3) and the information specified in subrule (3A); and
 (c) allows the CDR consumer, at any time, to withdraw a current consent; and
 (d) as part of the process of withdrawing a consent, displays a message, in accordance with the data standards, about the consequences of proceeding with withdrawing a consent; and
 (e) allows the CDR consumer to elect that redundant data be deleted in accordance with these rules and be able to withdraw such an election; and
 (f) is simple and straightforward to use; and
 (g) is prominently displayed and readily accessible to the CDR consumer.
Note: This subrule is a civil penalty provision (see rule 9.8).
 (2) Such a service is the accredited person's consumer dashboard for that consumer.
 (2A) The consumer dashboard may also allow a CDR consumer to amend a current consent.
 (3) For paragraph (1)(b), the information is the following for each consent:
 (a) details of the CDR data to which the consent relates;
 (b) for a use consent―details of the specific use or uses for which the CDR consumer has given their consent;
 (c) when the CDR consumer gave the consent;
 (d) whether the consent applies:
 (i) on a single occasion; or
 (ii) over a period of time;
 (e) if a collection consent or disclosure consent applies over a period of time:
 (i) what that period is; and
 (ii) how often data has been, and is