Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_11:p17
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 11 (pt 17/36)
Character Range: 287657–290324

1.10AA for the definition of "service data" in relation to a CDR outsourcing arrangement.

7.7  Rule relating to privacy safeguard 6—use or disclosure of CDR data by accredited data recipients
Note: Paragraph 56EI(1)(b) of the Act provides that an accredited data recipient of CDR data must not use or disclose it unless the use or disclosure is otherwise required, or authorised, under the consumer data rules. This rule provides an authorisation for that paragraph.
 Section 56EI of the Act applies only in relation to CDR data for which there are one or more CDR consumers: subsection 56EB(1) of the Act.
  For paragraph 56EI(1)(b) of the Act, the use or disclosure of CDR data for which there is a CDR consumer by an accredited data recipient of the CDR data is authorised under these rules if it is a permitted use or disclosure, other than one that relates to direct marketing.

7.8  Rule relating to privacy safeguard 7—use or disclosure of CDR data for direct marketing by accredited data recipients
Note: Paragraph 56EJ(1)(b) of the Act provides that an accredited data recipient of CDR data must not use or disclose it for direct marketing unless the use or disclosure is authorised under the consumer data rules in accordance with a valid consent of a CDR consumer for the CDR data. This rule provides an authorisation for that paragraph.
 Section 56EJ of the Act applies only in relation to CDR data for which there are one or more CDR consumers: subsection 56EB(1) of the Act.
  For paragraph 56EJ(1)(b) of the Act, the use or disclosure of CDR data for which there is a CDR consumer by an accredited data recipient of the CDR data for direct marketing is authorised under these rules if it is a permitted use or disclosure that relates to direct marketing.

7.8A  Rule relating to privacy safeguards 8 and 9—failure by CDR representative to comply with safeguards

Privacy safeguard 8—overseas disclosure
 (1) A CDR representative principal breaches this subrule if its CDR representative fails to comply with section 56EK of the Act in relation to service data of a CDR consumer as if it were an accredited data recipient of the service data.
Note 1: See rule 1.10AA for the definition of "service data" in relation to a CDR representative arrangement.
Note 2: This subrule is a civil penalty provision (see rule 9.8).

Privacy safeguard 9—government related identifiers
 (2) A CDR representative principal breaches this subrule if its CDR representative fails to comply with section 56EL of the Act in relation to service data of a CDR consumer as if it were an accredited data recipient of the service data.
Note 1: See rule 1.10AA for the definition