Document ID: chunk:federal_register_of_legislation:F2020L01688:clause:1_44:p7
Version: federal_register_of_legislation:F2020L01688
Segment Type: clause
Provision Reference: sch 1 cl 44 (pt 7/9)
Character Range: 48914–51720

so disclose that data;
 (c) if the accredited person would use the de‑identified data for general research―that fact, together with a link to a description in the accredited person's CDR policy of:
 (i) the research to be conducted; and
 (ii) any additional benefit to be provided to the CDR consumer for consenting to the use;
 (e) that the CDR consumer would not be able to elect, in accordance with rule 4.16, to have the de‑identified data deleted once it becomes redundant data.

Subdivision 4.3.4—Election to delete redundant data

4.16  Election to delete redundant data
 (1) The CDR consumer who gave a consent relating to particular CDR data may elect that the collected data, and any data derived from it, be deleted when it becomes redundant data:
 (a) when giving the consent; or
 (b) at any other time before the consent expires.
Note: See rule 7.12 for the effect of an election.
 (2) The CDR consumer may make the election:
 (a) by communicating it to the accredited person in writing; or
 (b) by using the accredited person's consumer dashboard.
 (3) This rule does not apply if, when seeking the consent, the accredited person informs the CDR consumer that they have a general policy of deleting CDR data when it becomes redundant data.
Note: See paragraph 4.17(1)(a).
 (4) This rule does not require the deletion of derived CDR data that was de‑identified in accordance with the CDR data de‑identification process before the collected data from which it was derived became redundant.

4.17  Information relating to redundant data
 (1) For subparagraph 4.11(3)(h)(i), the accredited person must state whether they have a general policy, when collected CDR data becomes redundant data, of:
 (a) deleting the redundant data; or
 (b) de‑identifying the redundant data; or
 (c) deciding, when the CDR data becomes redundant data, whether to delete it or de‑identify it.
 (2) An accredited person that gives the statement referred to in paragraph (1)(b) or (c) must also state:
 (a) that, if it de‑identifies the redundant data:
 (i) it would apply the CDR data de‑identification process; and
 (ii) it would be able to use or, if applicable, disclose (by sale or otherwise) the de‑identified redundant data without seeking further consent from the CDR consumer; and
 (b) what de‑identification of CDR data in accordance with the CDR data de‑identification process means; and
 (c) if applicable, examples of how it could use the redundant data once de‑identified.
Note:  For the CDR data de‑identification process, see rule 1.17.

Subdivision 4.3.5—Notification requirements

4.18  CDR receipts
 (1) The accredited person must give the CDR consumer a notice that complies with this rule (a CDR receipt) as soon as practicable after:
 (a) the CDR consumer gives the accredited person a collection