Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_11:p34
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 11 (pt 34/36)
Character Range: 330068–332851

data during the reporting period;
 (vii) the number of consents the CDR representative received from CDR consumers during the reporting period to disclose CDR data to trusted advisers;
 (viii) for each class of trusted advisers—the number of trusted advisers to whom CDR data was disclosed by the CDR representative during the reporting period;
 (ix) the number of insight disclosure consents the CDR representative received from CDR consumers during the reporting period.
  Civil penalty:
 (a) for an individual―$50,000; and
 (b) for a body corporate―$250,000.

Provision of reports
 (3) Each report must be submitted to:
 (a) the Commission; and
 (b) the Information Commissioner;
  within 30 days after the end of each reporting period.
  Civil penalty:
 (a) for an individual―$50,000; and
 (b) for a body corporate―$250,000.
 (4) Either the Commission or the Information Commissioner may:
 (a) publish any report received under this rule; or
 (b) require an accredited data recipient to publish, on its website, a report that it has prepared under subrule (2) or (2A).
 (5) For this rule, the reporting periods are:
 (a) 1 January to 30 June of each year; and
 (b) 1 July to 31 December of each year.
 (6) The information referred to in the following provisions is not required for a reporting period before 1 January 2024:
 (a) subparagraph (2)(f)(viiia);
 (b) subparagraphs (2A)(e)(iii), (iv), (vii), (viii) and (ix).

9.5  Requests from CDR consumers for copies of records

Requests to data holders of CDR data
 (1) A CDR consumer may request a data holder for copies of records relating to the information referred to in paragraphs 9.3(1)(a), (b), (c), (d), (f) and (fa) that relates to the CDR consumer.

Requests to accredited data recipients
 (2) A CDR consumer may request an accredited data recipient for copies of records relating to the information referred to in:
 (a) paragraphs 9.3(2)(a), (b), (c), (d), (da), (e), (ea), (eb), (ec), (ed), (ee), (ef), (eg), (f) and (m); and
 (b) paragraphs 9.3(2A)(d), (e), (f), (g), (ga), (h), (ha), (hb), (hc), (i) and (o);
  that relates to the CDR consumer.

Form for requests
 (3) A request under this rule must be in the form (if any) approved by the Commission for the purposes of this subrule.

Dealing with requests under this rule
 (4) A person who receives a request under this rule must provide the requested copies, in the form (if any) approved by the Commission for the purposes of this rule, as soon as practicable, but no later than 10 business days, after receiving the request.
  Civil penalty:
 (a) for an individual―$50,000; and
 (b) for a body corporate―$250,000.
 (5) A data holder must not charge a fee for making or responding to a request under subrule (1).
  Civil penalty:
 (a) for an individual―$50,000;