Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p29
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 29/75)
Character Range: 119775–122516

authorised to disclose, and may (but is not required to) disclose the voluntary consumer data it is authorised to disclose. The data is disclosed in machine‑readable form and in accordance with the data standards.
      Consumer data requests made to accredited data recipients
      If a request is made to an accredited data recipient, the accredited data recipient:
             • may (but is not required to) seek the CDR consumer's consent to disclose the requested CDR data; and
             • once that consent is obtained, may (but is not required to) disclose that CDR data to the accredited person.
      Special rules apply to joint accounts with 2 or more individual joint account holders. These are set out in Part 4A.
      A fee cannot be charged for the disclosure by a data holder of required consumer data, but could be charged for the disclosure by a data holder of voluntary consumer data, or by an accredited data recipient for disclosure of any CDR data.

Division 4.2—Consumer data requests made by accredited persons to CDR participants

Subdivision 4.2.1—Preliminary

4.2  Consumer data requests made by accredited persons to CDR participants—flowchart
  The following is a flowchart for how an accredited person makes a consumer data request to a CDR participant under this Division.
Note 1:  The flowchart does not illustrate how consumer data requests are made using CDR representatives.
Note 2: An accredited data recipient may ask the CDR consumer for a collection consent, use consent and disclosure consent at the same time (see subrules 4.3(2) and (2A)).

Subdivision 4.2.2—Requests to seek to collect CDR data from CDR participants

4.3  Request for accredited person to seek to collect CDR data
 (1) This rule applies if:
 (a) a CDR consumer requests an accredited person to provide goods or services to the CDR consumer or to another person; and
 (b) the accredited person needs to collect the CDR consumer's CDR data from a CDR participant under these rules and use it in order to provide those goods or services.
 (2) The accredited person may, in accordance with Division 4.3, ask the CDR consumer to give:
 (a) a collection consent for the accredited person to collect their CDR data from the CDR participant; and
 (b) a use consent for the accredited person to use that CDR data;
  in order to provide those goods or services.
Note 1: In order to provide goods or services in accordance with the CDR consumer's request, it might be necessary for the accredited person to request CDR data from more than 1 CDR participant.
Note 2: The CDR data may be collected and used only in accordance with the data minimisation principle: see rule 1.8.
 (2A) The accredited person may also ask a CDR consumer to