Document ID: chunk:federal_register_of_legislation:C2019A00063:clause:1_56ep
Version: federal_register_of_legislation:C2019A00063
Segment Type: clause
Provision Reference: sch 1 cl 56EP
Character Range: 101560–103521

56EP  Privacy safeguard 13—correction of CDR data

Obligation on data holders
 (1) If:
 (a) a CDR consumer for CDR data gives a request to a data holder of the CDR data (including a request given through a designated gateway for the CDR data); and
 (b) the request is for the data holder to correct the CDR data; and
 (c) the data holder was earlier required or authorised under the consumer data rules to disclose the CDR data;
the data holder must respond to the request to correct the CDR data by taking such steps as are specified in the consumer data rules to deal with each of the matters in subsection (3).
Note: This subsection is a civil penalty provision (see section 56EU).

Obligation on accredited data recipients
 (2) If:
 (a) a CDR consumer for CDR data gives a request to an accredited data recipient of the CDR data (including a request given through a designated gateway for the CDR data); and
 (b) the request is for the accredited data recipient to correct the CDR data;
the accredited data recipient must respond to the request by taking such steps as are specified in the consumer data rules to deal with each of the matters in subsection (3).
Note: This subsection is a civil penalty provision (see section 56EU).

Relevant matters when responding to correction requests
 (3) The matters are as follows:
 (a) either:
 (i) to correct the CDR data; or
 (ii) to include a statement with the CDR data, to ensure that, having regard to the purpose for which the CDR data is held, the CDR data is accurate, up to date, complete and not misleading;
 (b) to give notice of any correction or statement, or notice of why a correction or statement is unnecessary or inappropriate.
 (4) When working out the purpose for which the CDR data is held (see subparagraph (3)(a)(ii)), disregard the purpose of holding the CDR data so that it can be disclosed as required under the consumer data rules.

Subdivision G—Compliance with the privacy safeguards