Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_11:p22
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 11 (pt 22/36)
Character Range: 299827–302478

to be a failure by the CDR representative principal.

7.13  Rule relating to privacy safeguard 12—deletion of redundant data
 (1) For subsection 56EO(2) of the Act, this rule applies if rule 7.12 does not apply.
 (2) The step is to apply the CDR data deletion process to the redundant data.
Note: See rule 1.18 for the CDR data deletion process.

Subdivision 7.2.5—Rules relating to correction of CDR data

7.14  No fee for responding to or actioning correction request
 (1) A data holder must not charge a fee for responding to or actioning a request under subsection 56EP(1) of the Act.
Note: This subrule is a civil penalty provision (see rule 9.8).
 (2) An accredited data recipient must not charge a fee for responding to or actioning a request under subsection 56EP(2) of the Act.
Note: This subrule is a civil penalty provision (see rule 9.8).

7.15  Rule relating to privacy safeguard 13—steps to be taken when responding to correction request
  The recipient of a request under subsection 56EP(1) or (2) of the Act must:
 (a) acknowledge receipt of the request as soon as practicable; and
 (b) within 10 business days after receipt of the request, and to the extent that the recipient considers appropriate in relation to the CDR data that was the subject of the request:
 (i) correct the data; or
 (ii) do both of the following:
 (A) include a statement with the data to ensure that, having regard to the purpose for which it is held, the data is accurate, up to date, complete and not misleading;
 (B) where practicable, attach an electronic link to a digital record of the data in such a way that the statement will be apparent to any users of the data; and
 (c) give the requester a written notice, by electronic means, that:
 (i) indicates what the recipient did in response to the request; and
 (ii) if the recipient did not think it appropriate to do either of the things referred to in subparagraphs (b)(i) or (ii)―states why a correction or statement is unnecessary or inappropriate; and
 (iii) sets out the complaint mechanisms available to the requester.
Note 1: In relation to subparagraph (c)(iii), see Part 6.
Note 2: The written notice could be given through the accredited person's or the data holder's consumer dashboard (see rules 1.14 and 1.15).
Note 3: See also, in relation to the energy sector, clause 6.1 of Schedule 4.

7.16  Rule relating to privacy safeguard 13—correction of data—CDR representative
 (1) A CDR representative principal breaches this subrule if its CDR representative fails to comply with subsection 56EP(2) of the Act in relation to service data of a CDR consumer as if it were an accredited person.