Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_11:p14
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 11 (pt 14/36)
Character Range: 280247–282988

reasonably needed to do those things;
 (g) disclosing (by sale or otherwise), to any person, CDR data that has been de‑identified in accordance with the CDR data de‑identification process on becoming redundant data;
 (h) where the accredited data recipient collected the CDR data on behalf of another accredited person in its capacity as a direct or indirect OSP of that person—using or disclosing the CDR data in accordance with the relevant CDR outsourcing arrangement;
 (i) disclosing CDR data to an accredited person if the CDR consumer has:
 (i) given the accredited person:
 (A) a collection consent to collect the CDR data from the accredited data recipient; and
 (B) a use consent; and
 (ii) given the accredited data recipient an AP disclosure consent to disclose the CDR data to the accredited person;
 (j) where the accredited data recipient is a CDR representative principal—disclosing the CDR data to a CDR representative for the purposes of a use or disclosure by the CDR representative that would be a permitted use or disclosure under paragraphs (a) to (g) or (i), if the CDR representative were an accredited data recipient that had collected the CDR data under the consumer data request.
 (2) However:
 (a) a disclosure is not a permitted use or disclosure unless it is done in accordance with the data standards; and
 (b) none of the uses of CDR data referred to in subrule 4.12(3) is a permitted use or disclosure.
Note: The same list of uses appears in subrule 4.20F(3).

Permitted uses or disclosures that relate to direct marketing
 (3) For these rules, a use or disclosure of the CDR consumer's CDR data by an accredited data recipient that is not itself a permitted use or disclosure under subrule (1) is nevertheless a permitted use or disclosure that relates to direct marketing if it consists of one of the following:
 (a) in accordance with a direct marketing consent from the CDR consumer—sending to the CDR consumer:
 (i) information about upgraded or alternative goods or services to existing goods or services; or
 (ii) an offer to renew existing goods or services when they expire; or
 (iii) information about the benefits of existing goods or services; or
 (iv) information about other goods or services provided by another accredited person, if the accredited data recipient:
 (A) reasonably believes that the CDR consumer might benefit from those other goods or services; and
 (B)  sends such information to the CDR consumer on no more than a reasonable number of occasions;
 (b) in accordance with a direct marketing consent from the CDR consumer—disclosing CDR data to an accredited person to enable the accredited person to provide the goods or services referred to in subparagraph (a)(iv), if the CDR