Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p33
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 33/75)
Character Range: 129580–132272

to provide those goods or services.
Note 2: These rules will progressively permit consumer data requests to be made in relation to CDR data held by a broader range of data holders within the banking sector, and in relation to a broader range of CDR data, according to the timetable set out in Part 6 of Schedule 3.
 (3) An accredited person must, if it makes a consumer data request under this Subdivision, make the request:
 (a) using the data holder's accredited person request service; and
 (b) in accordance with the data standards.
Note 1: A data holder cannot charge an accredited person a fee for making a consumer data request in relation to required consumer data.
Note 2: This subrule is a civil penalty provision (see rule 9.8).

4.5  Data holder must ask eligible CDR consumer to authorise disclosure
 (1) This rule applies if:
 (a) a data holder receives a consumer data request under rule 4.4; and
 (b) there is no current authorisation for the data holder to disclose the requested data to the person who made the request; and
 (c) the data holder reasonably believes that the request was made by an accredited person on behalf of an eligible CDR consumer.
Note:  See rule 1.7 for the meaning of "eligible".  See also:
                  for the banking sector—clause 2.1 of Schedule 3;
                  for the energy sector—clause 2.1 of Schedule 4.
 (2) If the data holder is considering disclosing any of the requested voluntary consumer data, the data holder must ask the CDR consumer on whose behalf the request was made to authorise the disclosure:
 (a) in accordance with Division 4.4; and
 (b) in accordance with the data standards.
Note 1: See rule 1.7 for the meaning of "voluntary consumer data".  See also:
                  for the banking sector—clause 3.2 of Schedule 3;
                  for the energy sector—clause 3.2 of Schedule 4.
Note 2: This subrule is a civil penalty provision (see rule 9.8).
 (3) The data holder must, subject to rule 4.7, ask the CDR consumer on whose behalf the request was made to authorise the disclosure of any requested required consumer data:
 (a) in accordance with Division 4.4; and
 (b) in accordance with the data standards.
Note 1:  See rule 1.7 for the meaning of "required consumer data".  See also:
                  for the banking sector—clause 3.2 of Schedule 3;
                  for the energy sector—clause 3.2 of Schedule 4.
Note 2:  This subrule is a civil penalty provision (see rule 9.8).

4.6  Disclosing consumer data in response to a consumer data request
 (1) This rule applies if:
 (a) a data holder has received a consumer data request made under rule 4.4 for disclosure of CDR data; and
 (b) the