Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p1
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 1/75)
Character Range: 50346–53164

4                                       a CDR participant                                           (a) a CDR participant for any CDR data; or
                                                                                                    (b) the CDR participant for the particular CDR data that is dealt with in relation to the reference.

References to data holder
 (3) In these rules, depending on the context, a reference to a data holder is a reference to a data holder that would be required or that is authorised to disclose CDR data in response to a product data request or a consumer data request that is made in accordance with these rules.
Note: These rules will progressively apply to a broader range of data holders:
                  for the banking sector, see Part 6 of Schedule 3;
                  for the energy sector, see Part 8 of Schedule 4.

References to a person's CDR data
 (4) In these rules, a reference to a person's CDR data is a reference to the CDR data for which that person is a CDR consumer.

References to accredited person
 (5) In these rules, unless the contrary intention appears, a reference to an accredited person making a consumer data request, collecting CDR data, obtaining consents, providing a consumer dashboard, or using or disclosing CDR data does not include a reference to an accredited person doing those things on behalf of an OSP principal in its capacity as a direct or indirect OSP of:
  (a) another accredited person; or
 (b) a CDR representative of itself or of another accredited person;
in accordance with the relevant CDR outsourcing arrangement.

1.8  Data minimisation principle
 (1) The collection of CDR data by an accredited person complies with the data minimisation principle if, when making a consumer data request on behalf of a CDR consumer, the accredited person does not seek to collect:
 (a) more CDR data than is reasonably needed; or
 (b) CDR data that relates to a longer time period than is reasonably needed;
in order for it, or a relevant CDR representative, to provide the goods or services requested by the CDR consumer.
 (2) The use or disclosure of CDR data by an accredited person or a CDR representative complies with the data minimisation principle if, when providing the requested goods or services, or doing any other thing that constitutes a permitted use or disclosure of collected CDR data, the use or disclosure of the collected data, or any CDR data directly or indirectly derived from it, does not go beyond what is reasonably needed in order to provide the requested goods or services or to effect the permitted use or disclosure.

1.9  Fit and proper person criteria
 (1) For these rules, the fit and proper person criteria, in relation to a person, are the following:
 (a) whether the person, or any associated