Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p19
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 19/75)
Character Range: 95085–97994

(the relevant data).
Note: This process is applied by an accredited data recipient when de‑identifying CDR data in accordance with a consent from a CDR consumer (see Subdivision 4.3.3) and when de‑identifying redundant data for the purposes of privacy safeguard 12 (see rule 7.12).
 (2) First, the accredited data recipient must consider whether, having regard to the following:
 (a) the DDF;
 (b) the techniques that are available for de‑identification of data;
 (c) the extent to which it would be technically possible for any person to be once more identifiable, or reasonably identifiable, after de‑identification in accordance with such techniques;
 (d) the likelihood (if any) of any person once more becoming so identifiable, or reasonably identifiable from the data after de‑identification;
  it would be possible to de‑identify the relevant data to the extent (the required extent) that no person would any longer be identifiable, or reasonably identifiable, from:
 (e) the relevant data after the proposed de‑identification; and
 (f) other information that would be held, following the completion of the de‑identification process, by any person.
 (3) If this is possible, the accredited data recipient must:
 (a) determine the technique that is appropriate in the circumstances to de‑identify the relevant data to the required extent; and
 (b) apply that technique to de‑identify the relevant data to the required extent; and
 (c) delete, in accordance with the CDR data deletion process, any CDR data that must be deleted in order to ensure that no person is any longer identifiable, or reasonably identifiable, from the information referred to in paragraphs (2)(e) and (f); and
 (d) as soon as practicable, make a record to evidence the following:
 (i) its assessment that it is possible to de‑identify the relevant data to the required extent;
 (ii) that the relevant data was de‑identified to that extent;
 (iii) how the relevant data was de‑identified, including records of the technique that was used;
 (iv) any persons to whom the de‑identified data is disclosed.
 (4) If this is not possible, the accredited data recipient must delete the relevant data and any CDR data directly or indirectly derived from it in accordance with the CDR data deletion process.
Note: For the CDR data deletion process, see rule 1.18.
 (5) For this rule, the DDF is The De‑Identification Decision‑Making Framework published by the Office of the Australian Information Commissioner and Data61, as in force from time to time.
Note: The De‑Identification Decision‑Making Framework could in 2023 be downloaded from Data61's website (https://www.data61.csiro.au/).

1.17A  Identification of otherwise redundant data that is not to be deleted
 (1) Where the accredited data recipient has identified CDR data as redundant, it must identify whether any of the following provisions of the Act apply to the CDR data:
 (a)