Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p32
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 32/75)
Character Range: 127108–129805

CDR representative could use it in order to provide the requested goods or services. However, the notification requirement of rule 4.20O would apply.

4.3B  Consumer data requests by accredited persons to CDR representatives
Note: Subrule (1) allows an accredited person to make a consumer data request to a CDR representative as if the latter were also an accredited person.
 Subrule (2) allows a CDR representative that receives such a consumer data request to obtain a disclosure consent from the consumer. Under paragraphs 7.5(1)(i) and (j), the CDR representative is then able to disclose the requested data.

Application of rule 4.7A to CDR representative holding service data
 (1) Rule 4.7A applies in relation to a CDR representative that holds service data as if:
 (a) a reference to CDR data were a reference to CDR data included in the service data; and
 (b) a reference to an accredited data recipient were a reference to the CDR representative.

Application of rule 4.7B to CDR representative receiving request for service data
 (2) Rule 4.7B applies in relation to a CDR representative that receives, or reasonably anticipates receiving, a consumer data request under rule 4.7A as applied by subrule (1), as if:
 (a) a reference to an accredited data recipient were a reference to the CDR representative; and
 (b) a reference to Division 4.3 were a reference to Division 4.3A.

Subdivision 4.2.3—Consumer data requests by accredited persons to data holders

4.4  Consumer data request by accredited person to data holder
 (1) If:
 (a) a CDR consumer has given an accredited person a request under rule 4.3 or 4.3A to seek to collect CDR data from a data holder; and
 (b) the request is valid;
  the accredited person may request the data holder to disclose, to the accredited person, some or all of the CDR data that:
 (c) is the subject of the relevant collection consent, use consent and disclosure consent; and
 (d) can be collected, used and disclosed in compliance with the data minimisation principle.
Note: See rule 1.8 for the definition of the "data minimisation principle".
 (2) Such a request is a consumer data request by an accredited person to a data holder on behalf of a CDR consumer.
Note 1: An accredited person might need to make consumer data requests to several CDR participants in order to provide the goods or services requested by the CDR consumer, and might need to make regular consumer data requests over a period of time in order to provide those goods or services.
Note 2: These rules will progressively permit consumer data requests to be made in relation to CDR data held by a broader range of data holders within the banking sector, and in relation to