Document ID: chunk:federal_register_of_legislation:C2019A00063:clause:1_56en
Version: federal_register_of_legislation:C2019A00063
Segment Type: clause
Provision Reference: sch 1 cl 56EN
Character Range: 97620–100107

56EN  Privacy safeguard 11—quality of CDR data

Disclosures by data holders
 (1) If a data holder of CDR data is required or authorised under the consumer data rules to disclose the CDR data, the data holder must take reasonable steps to ensure that the CDR data is, having regard to the purpose for which it is held, accurate, up to date and complete.
Note: This subsection is a civil penalty provision (see section 56EU).

Disclosures by accredited data recipients
 (2) If an accredited data recipient of CDR data is disclosing the CDR data when:
 (a) required under the consumer data rules to do so in response to a valid request from a CDR consumer for the CDR data; or
 (b) otherwise required, or authorised, under the consumer data rules to do so;
the accredited data recipient must take reasonable steps to ensure that the CDR data is, having regard to the purpose for which it is held, accurate, up to date and complete.
Note 1: This subsection is a civil penalty provision (see section 56EU).
Note 2: The valid request referred to in paragraph (a) could be given through a designated gateway (see section 56BG).
 (3) If a CDR participant for CDR data:
 (a) makes a disclosure referred to in subsection (1) or (2) for a CDR consumer; and
 (b) later becomes aware that some or all of the CDR data was incorrect when it was disclosed because, having regard to the purpose for which it was held, it was inaccurate, out of date or incomplete;
the CDR participant must advise the CDR consumer accordingly in accordance with the consumer data rules.
Note: This subsection is a civil penalty provision (see section 56EU).

Disclosing corrected CDR data
 (4) If:
 (a) a CDR consumer for CDR data is advised under subsection (3) by a CDR participant for the CDR data that some or all of the CDR data was incorrect when the CDR participant had earlier disclosed it; and
 (b) the CDR consumer requests the CDR participant to fix this by disclosing the corrected CDR data;
the CDR participant must comply with the request by disclosing the corrected CDR data to the recipient of that earlier disclosure.
Note: This subsection is a civil penalty provision (see section 56EU).

Purpose for which the CDR data was held
 (5) When working out the purpose for which the CDR data is or was held, disregard the purpose of holding the CDR data so that it can be disclosed as required under the consumer data rules.
Note: This subsection is relevant for subsections (1) and (2) and paragraph (3)(b).