Document ID: chunk:federal_register_of_legislation:F2024C01258:schedule:4:p2
Version: federal_register_of_legislation:F2024C01258
Segment Type: schedule
Provision Reference: sch 4 (pt 2/12)
Character Range: 23016–25700

data request.
      A product data request is made in accordance with relevant data standards, using a specialised service provided by the data holder. Such a request cannot be made for CDR data that relates to a particular identifiable CDR consumer. The data is disclosed, in machine‑readable form, to the person who made the request. The data holder cannot impose conditions, restrictions or limitations of any kind on the use of the disclosed data.
      Consumer data requests made by CDR consumers
      A CDR consumer who, in accordance with a Schedule to these rules, is eligible to do so may directly request a data holder to disclose CDR data that relates to them. Such a request is called a consumer data request.
      A consumer data request that is made directly to a data holder is made using a specialised online service provided by the data holder. The data is disclosed, in human‑readable form, to the CDR consumer who made the request.
      Consumer data requests made on behalf of CDR consumers
      A CDR consumer who, in accordance with a Schedule to these rules, is eligible to do so may request an accredited person to request a CDR participant to disclose CDR data that relates to the consumer. The request made by the accredited person is called a consumer data request.
      A consumer data request that is made to a data holder on behalf of a CDR consumer by an accredited person must be made in accordance with relevant data standards, using a specialised service provided by the data holder. The data is disclosed, in machine‑readable form, to the accredited person.
      Under the data minimisation principle, the accredited person may only collect, use and disclose CDR data in order to provide goods or services in accordance with a request from a CDR consumer, and may only use or disclose it for that purpose, or for a limited number of other purposes which require an additional consent from the CDR consumer.
      When consumers are eligible to make requests
      A consumer data request can only be made in relation to certain classes of product and consumer CDR data.  These are specified in Schedules to these rules that relate to different designated sectors. The relevant Schedule will also set out:
             • the circumstances in which a CDR consumer will be eligible to make or initiate a consumer data request for CDR data in that sector; and
             • the CDR data that must be disclosed by the data holder in response to a valid request and the CDR data that may be, but is not required to be, disclosed by the data holder.
      Schedule 3 relates to the banking sector. Initially, these rules will apply only in relation