Document ID: chunk:federal_register_of_legislation:F2020L01688:clause:1_44:p2
Version: federal_register_of_legislation:F2020L01688
Segment Type: clause
Provision Reference: sch 1 cl 44 (pt 2/9)
Character Range: 36420–39023

consent―the particular types of CDR data to which the consent will apply; and
 (ii) in the case of a use consent―the specific uses of collected data to which they are consenting; and
 (b) allow the CDR consumer to choose the period of the collection consent, use consent, or disclosure consent (as appropriate) by enabling the CDR consumer to actively select or otherwise clearly indicate whether the consent would apply:
 (i)  on a single occasion; or
 (ii)  over a specified period of time; and
 (ba) in the case of a disclosure consent―allow the CDR consumer to select the person to whom the CDR data may be disclosed;
 (c) ask for the CDR consumer's express consent to the choices referred to in paragraphs (a), (b) and (ba) for each relevant category of consents; and
 (d) if the accredited person intends to charge a fee for disclosure of CDR data, or pass on to the CDR consumer a fee charged by a data holder for disclosure of CDR data:
 (i) clearly distinguish between the CDR data for which a fee will, and will not, be charged or passed on; and
 (ii) allow the CDR consumer to actively select or otherwise clearly indicate whether they consent to the collection or disclosure, as appropriate, of the CDR data for which a fee will be charged or passed on; and
 (e) allow the CDR consumer to make an election in relation to deletion of redundant data in accordance with rule 4.16.
Example: For a collection consent, an accredited person could present the CDR consumer with a set of un‑filled boxes corresponding to different types of data, and permit the CDR consumer to select the boxes that correspond to the data they consent to the accredited person collecting.
Note 1: An accredited person could not infer consent, or seek to rely on an implied consent.
Note 2: For paragraph (b), the specified period may not be more than 12 months: see subrule 4.12(1). After the end of the period, redundant data would need to be dealt with in accordance with subsection 56EO(2) of the Act (privacy safeguard 12) and rules 7.12 and 7.13.
Note 3:  For paragraph (d), a data holder could charge a fee for disclosure of voluntary consumer data, while an accredited data recipient could charge a fee for the disclosure of any CDR data.
 (2) The accredited person must not present pre‑selected options to the CDR consumer for the purposes of subrule (1).

Information presented to CDR consumer when asking for consent
 (3) When asking a CDR consumer to give consent, the accredited person must give the CDR consumer the following information:
 (a) its name;
 (b) its accreditation number;
 (c) in the case of