Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p51
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 51/75)
Character Range: 174460–177208

definition of "data minimisation principle".
  (3) A CDR representative must not ask for a consent:
 (a) that is not in a category of consents; or
 (b) subject to subrule (4), for using the CDR data, including by aggregating the data, for the purpose of:
 (i) identifying; or
 (ii) compiling insights in relation to; or
 (iii) building a profile in relation to;
  any identifiable person who is not the CDR consumer who made the consumer data request.
 (4) Paragraph (3)(b) does not apply in relation to a person whose identity is readily apparent from the CDR data, if the CDR representative is seeking consent to:
 (a) derive, from that CDR data, CDR data about that person's interactions with the CDR consumer; and
 (b) use that derived CDR data in order to provide the requested goods or services.

Subdivision 4.3A.3—Amending consents

4.20G  Amendment of consent
  An amendment of a consent takes effect when the CDR consumer amends the consent.
Note: It is not possible for the CDR consumer to specify a different day or time.

4.20H  Inviting CDR consumer to amend consent
 (1) A CDR representative may invite a CDR consumer to amend a consent given in accordance with this Division only in accordance with this rule.
 (2) The CDR representative may give the invitation:
 (a) if the CDR representative principal's consumer dashboard allows an amendment to a consent in accordance with subrule 1.14(2A)―via the consumer dashboard; or
 (b) in writing directly to the CDR consumer.
Note: The CDR representative principal may allow the CDR representative to provide the consumer dashboard on its behalf—see subrule 1.14(5).
 (3) The CDR representative may invite a CDR consumer to amend a current consent if:
 (a) the amendment would better enable the CDR representative to provide the goods or services referred to in paragraph 4.3A(1)(a); or
 (b) the amendment would:
 (i) be consequential to an agreement between the CDR representative and the CDR consumer to modify those goods or services; and
 (ii) enable the CDR representative to provide the modified goods or services.
 (4) The CDR representative must not, for an invitation to amend the period referred to in paragraph 4.20E(1)(b):
 (a) give the invitation any earlier than a reasonable period before the current consent is expected to expire; or
 (b) give more than a reasonable number of such invitations within this period.

4.20I  Process for amending consent
 (1) Subject to this rule, if a CDR representative allows CDR consumers to amend consents, it must allow them to do so in the same manner that it asks for CDR consumers to give consents.
 (3) In the case of an amendment to a consent, in addition to the information referred to in subrule 4.20E(3), the CDR representative