Document ID: chunk:federal_register_of_legislation:F2020L01688:clause:1_92:p8
Version: federal_register_of_legislation:F2020L01688
Segment Type: clause
Provision Reference: sch 1 cl 92 (pt 8/8)
Character Range: 102656–105158

as it takes reasonable steps to ensure that the functionality complies with those subparagraphs.

Exception in the case of physical or financial harm or abuse
 (4) Despite this clause and clause 4.15 of this Schedule, the data holder may decline:
 (a) to provide a relevant account holder with a consumer dashboard; or
 (b) if a relevant account holder already has a consumer dashboard―to reflect details of the request relating to the joint account in their dashboard;
  if it considers it necessary to do either in order to prevent physical or financial harm or abuse.

4.15  Consumer dashboard for the requester
  For paragraph 1.15(1)(d) of these rules, if a relevant account holder's consumer dashboard contains details of approvals under clause 4.14 of this Schedule, the dashboards of the other joint account holders must contain those details.

4.16  Notification requirements for consumer data requests on joint accounts
 (1) If the requester gives, amends or withdraws an authorisation, or if an authorisation expires, the data holder must:
 (a) as soon as practicable, notify each relevant account holder through its ordinary means of contacting them; and
 (b) if:
 (i) the requester is a secondary user of the joint account; and
 (ii) no disclosure option applies to the joint account;
  ask the relevant account holders to indicate which disclosure option they would like to apply to the account:
 (iii) through the joint account management service; and
 (iv) in accordance with the data standards; and
 (c) if a co‑approval option applies to the account―in the case of an amendment, include in the notification:
 (i) the nature of the amendment; and
 (ii) how they can remove an approval to prevent further CDR data relating to the joint account being disclosed under these rules.
Note: This subclause is a civil penalty provision (see rule 9.8).
 (2) If a relevant account holder:
 (a) using their consumer dashboard, gives or removes an approval; or
 (b) does not provide an approval within the time frame referred to in paragraph 4.11(2)(e) of this Schedule;
  the data holder must notify the requester and any other relevant account holder through its ordinary means of contacting them.
Note: This subclause is a civil penalty provision (see rule 9.8).
 (3) However, a notification to a particular account holder under this clause is not required if the data holder considers it necessary to avoid notifying that account holder in order to prevent physical or financial harm or abuse.