Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p56
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 56/75)
Character Range: 187347–190235

(see rule 9.8).

4.20Q  Notification of consumer if collection consent expires
 (1) This rule applies if, in relation to particular goods or services a CDR representative is providing as referred to in subrule 4.3A(1):
 (a) the collection consent expires; but
 (b) the use consent, or any disclosure consent, is current.
 (2) The CDR representative must notify the CDR consumer as soon as practicable after the collection consent expires that, at any time, they:
 (a) may withdraw the use consent or disclosure consent; and
 (b) may make the election to delete redundant data in respect of that CDR data under rule 4.20M.
Note: A failure to do this could make the CDR representative principal liable for a civil penalty (see rule 1.16A).
 (3) The notification must be given in writing otherwise than through the CDR representative principal's consumer dashboard.
Note: The CDR representative principal may allow the CDR representative to provide the consumer dashboard on its behalf—see subrule 1.14(5).
 (4) The notification may also be included in the CDR representative principal's consumer dashboard.
Note: The CDR representative principal may allow the CDR representative to provide the consumer dashboard on its behalf—see subrule 1.14(5).

4.20R  Notification if collection consent or AP disclosure consent expires
 (1) This rule applies if:
 (a) a CDR representative principal has made a consumer data request to an accredited data recipient on behalf of a CDR representative, based on a collection consent given under this Division relating to particular CDR data and that accredited data recipient; and
 (b) the accredited data recipient has an AP disclosure consent relating to that CDR data; and
 (c) the request has not been completely resolved.
 (2) If the collection consent expires in accordance with these rules, the CDR representative principal must notify the accredited data recipient as soon as practicable of the expiry.
Note 1: This subrule is a civil penalty provision (see rule 9.8).
Note 2: The AP disclosure consent that the accredited data recipient has expires when the notification is received—see subrule 4.20K(2).
 (3) If the AP disclosure consent expires in accordance with these rules, the accredited data recipient must notify the CDR representative principal as soon as practicable of the expiry.
Note 1: This subrule is a civil penalty provision (see rule 9.8).
Note 2: The collection consent that the CDR representative principal has expires when the notification is received—see subrule 4.20K(2).

4.20S  Notification if collection consent is amended
 (1) This rule applies if:
 (a) a CDR representative principal has made a consumer data request to a CDR participant on behalf of a CDR representative, based on a collection consent given under this Division relating to particular CDR data and a particular CDR participant; and
 (b) the request has