Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_11:p12
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 11 (pt 12/36)
Character Range: 275293–277981

as if it were an accredited person.
Note 1: See rule 1.10AA for the definition of "service data" in relation to a CDR representative arrangement.
Note 2: This subrule is a civil penalty provision (see rule 9.8).
 (3) For subrule (2), it is irrelevant whether the action of the CDR representative in relation to the service data is in accordance with the CDR representative arrangement.

7.3A  Rule relating to privacy safeguard 4—destruction of unsolicited data—CDR representative
 (1) A CDR representative principal breaches this subrule if its CDR representative fails to comply with section 56EG of the Act in relation to service data of a CDR consumer as if;
 (a) it were an accredited person; and
 (b) it had collected the service data.
Note 1: See rule 1.10AA for the definition of "service data" in relation to a CDR representative arrangement.
Note 2: This subrule is a civil penalty provision (see rule 9.8).
 (2) For subrule (1), it is irrelevant whether the action of the CDR representative in relation to the service data is in accordance with the CDR representative arrangement.

7.3B  Rule relating to privacy safeguard 4—destruction of unsolicited data—outsourced service providers
 (1) An accredited person breaches this subrule if a direct or indirect OSP of:
 (a) the accredited person; or
 (b) a CDR representative of the accredited person;
fails to comply with section 56EG of the Act in relation to service data of a CDR consumer as if:
 (c) it were an accredited person; and
 (d) it had collected the service data.
Note 1: See rule 1.10 for the definition of "service data" in relation to a CDR outsourcing arrangement.
Note 2: This subrule is a civil penalty provision (see rule 9.8).
 (2) For subrule (1), it is irrelevant whether the action of the direct or indirect OSP in relation to the service data is in accordance with the CDR outsourcing arrangement.

Subdivision 7.2.2—Rules relating to collecting CDR data

7.4  Rule relating to privacy safeguard 5—notifying of the collection of CDR data
 (1) For section 56EH of the Act, and subject to subrule (2), an accredited data recipient that collected the CDR data in accordance with section 56EF of the Act as a result of a collection consent must update the person's consumer dashboard as soon as practicable to indicate:
 (a) what CDR data was collected; and
 (b) when the CDR data was collected; and
 (c) the CDR participant for the CDR data from which the CDR data was collected.
 (2) Where the CDR data was collected by a sponsor on behalf of an affiliate:
 (a) the sponsor is not required to provide the consumer dashboard; and
Note: The affiliate, as an accredited person that makes the consumer request