Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p26
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 26/75)
Character Range: 112182–114955

standards.
 (2) The data holder must inform the requester of such a refusal in accordance with the data standards.
  Civil penalty:
 (a) for an individual―$50,000; and
 (b) for a body corporate―$250,000.

2.6  Use of data disclosed pursuant to product data request
  A data holder that discloses CDR data in response to a product data request must not impose conditions, restrictions or limitations of any kind on the use of the disclosed data.
Note: This rule is a civil penalty provision (see rule 9.8).

Part 3—Consumer data requests made by eligible CDR consumers

Division 3.1—Preliminary

3.1  Simplified outline of this Part

      This Part deals with consumer data requests that are made directly by eligible CDR consumers to data holders. Such requests are made using the data holder's direct request service.
      A request may be for the CDR consumer's required consumer data, their voluntary consumer data, or both. Schedule 3 to these rules:
             • provides for what is required consumer data and voluntary consumer data for the banking sector; and
             • sets out the circumstances in which CDR consumers are eligible to request their banking sector CDR data.
      When validly requested in accordance with this Part, a data holder:
             • must, subject to an exception outlined in this Part, disclose required consumer data; and
             • may, but is not required to, disclose voluntary consumer data.
      In either case, the data is disclosed to the CDR consumer who made the request, in human‑readable form and in accordance with the data standards.
      Special rules apply to joint accounts with 2 or more individual joint account holders. These are set out in Part 4A.
      A fee cannot be charged for the disclosure of required consumer data, but could be charged for the disclosure of voluntary consumer data.

3.2  How an eligible CDR consumer makes a consumer data request—flowchart
  The following is a flowchart for how an eligible CDR consumer makes a consumer data request under this Part:

Division 3.2—Consumer data requests made by CDR consumers

3.3  Consumer data requests made by CDR consumers
 (1) A CDR consumer may, using the data holder's direct request service, request a data holder to disclose some or all of their CDR data.
Note: In the banking sector, these rules will progressively permit consumer data requests to be made to a broader range of data holders, and in relation to a broader range of CDR data, according to the timetable set out in Part 6 of Schedule 3.
 (2) Such a request is a consumer data request made by a CDR consumer.
Note: A fee cannot be charged for the disclosure of required consumer data: see section 56BU of the Act.
 (3) A consumer data request made under this Part