Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p43
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 43/75)
Character Range: 154203–157052

of another provision of these rules that references this paragraph―when the consent expires.
Note: Subrule 5.1B(6) is an example of a provision referencing paragraph (e). This relates to when a person with sponsored accreditation ceases to have a registered sponsor.
 (2) For paragraph (1)(c), the period is:
 (a) in the case of a consent given by a CDR business consumer that includes a business consumer statement—7 years; and
 (b) in any other case—12 months.
 (3) If:
 (a) an accredited person is notified by a data holder, under rule 4.26A, of the withdrawal of an authorisation to disclose CDR data that relates to a collection consent given under this Division; and
 (b) the collection consent has not expired in accordance with subrule (1);
  the collection consent expires when the accredited person receives that notification.
Note: This would not result in the use consent relating to any CDR data that had already been collected expiring. However, see the notification requirement of rule 4.18A.
 (4) If:
 (a) an accredited person has a collection consent given under this Division to collect particular CDR data from a particular accredited data recipient; and
 (b) the accredited data recipient has an AP disclosure consent to disclose that CDR data to that accredited person;
  then if one of those consents expires, the other expires when the accredited person or accredited data recipient is notified of the first‑mentioned expiry.
Note: The notification is required by rule 4.18B.
 (5) If an accredited person becomes a data holder, rather than an accredited data recipient, of particular CDR data as a result of subsection 56AJ(4) of the Act, all of that accredited person's consents given under this Division that relate to that CDR data expire.
 (6) If an accredited person's accreditation is revoked or surrendered in accordance with rule 5.17, all of the accredited person's consents expire when the revocation or surrender takes effect.

Subdivision 4.3.3—Information relating to de‑identification of CDR data

4.15  Additional information relating to de‑identification of CDR data
  For paragraph 4.11(3)(e), the additional information the accredited person must give the CDR consumer when seeking a de‑identification consent is the following:
 (a) what the CDR data de‑identification process is;
 (b) if it would disclose (by sale or otherwise) the de‑identified data to one or more other persons;
 (i) that fact; and
 (ii) the classes of persons to which it would disclose that data;
 (iii) why it would so disclose that data;
 (c) if the accredited person would use the de‑identified data for general research―that fact, together with a link to a description in the accredited person's CDR policy of:
 (i) the research to be conducted; and
 (ii) any additional benefit to be provided to the CDR consumer for consenting to