Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_11:p25
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 11 (pt 25/36)
Character Range: 307366–310200

the Information Commissioner;
  on the consultation draft; and
 (c) cause the consultation draft to be published on the website of the Data Standards Body; and
 (d) invite submissions in relation to the consultation draft from interested members of the public to be made by a specified date that is no earlier than 28 days after the draft is published.
 (3) The Data Standards Chair may extend the date for consultation.
 (4) A failure to comply with this rule does not affect the validity or enforceability of a data standard or an amendment to a data standard.

8.10  Matters to have regard to when making or amending data standards
  When making or amending a data standard, the Data Standards Chair must have regard to the following:
 (a) the advice or submissions (if any) received from:
 (i) the Data Standards Advisory Committee; or
 (ii) the Commission; or
 (iii) the Information Commissioner;
  on a draft of the proposed standard or amendment (the consultation draft);
 (b) submissions (if any) received during the public consultation (if any) that was undertaken in relation to the consultation draft in accordance with rule 8.9;
 (c) any advice from any other relevant committee, advisory panel or consultative group that has been established by the Chair (see paragraph 56FH(2)(a) of the Act).

Division 8.4—Data standards that must be made

8.11  Data standards that must be made
 (1) The Data Standards Chair must make one or more data standards about each of the following:
 (a) the processes for:
 (i) making, responding to and managing product data requests and consumer data requests; and
 (ii) obtaining, managing, amending and withdrawing authorisations and consents; and
 (iii) making, responding to and managing requests by the primary data holder for SR data under rules 1.22 and 1.23;
 (iv) obtaining and managing business consumer statements;
 (b) the collection and use of CDR data, including requirements to be met by CDR participants in relation to seeking consent from CDR consumers;
 (c) the disclosure and security of CDR data, including:
 (i) authentication of CDR consumers to a standard which meets, in the opinion of the Chair, best practice security requirements; and
 (ii) seeking authorisations to disclose CDR data in response to consumer data requests; and
 (iii) consumer experience data standards for disclosure of CDR data to accredited persons; and
 (iv) consumer experience data standards for disclosure of CDR data to trusted advisers;
 (v) consumer experience data standards for disclosure of CDR insights;
 (vi) consumer experience data standards for disclosure of CDR data to a person under a consent for which a business consumer statement is given (see paragraph 1.10A(10)(a));
 (d) the types of CDR data and descriptions of those types, to be used by CDR participants in making and