Document ID: chunk:federal_register_of_legislation:C2025C00189:section:56es
Version: federal_register_of_legislation:C2025C00189
Segment Type: section
Provision Reference: s 56ES
Character Range: 855483–856457

56ES  Notification of CDR data security breaches

Object
 (1) The object of this section is for Part IIIC of the Privacy Act 1988 to apply to an accredited data recipient, or designated gateway, that holds a CDR consumer's CDR data in a corresponding way to the way that Part applies to an entity that holds an individual's personal information.
Note: That Part is about notification of eligible data breaches.

Extended application of Part IIIC of the Privacy Act 1988
 (2) Part IIIC of the Privacy Act 1988, and any other provision of that Act that relates to that Part, also apply in relation to:
 (a) an accredited data recipient of CDR data; or
 (b) a designated gateway for CDR data;
as if the substitutions in the following table, and the modifications in subsection (3), were made.

Substitutions to be made
Item                      Subject to subsection (4), for a reference in Part IIIC to …                                          … substitute a reference to …