Document ID: chunk:federal_register_of_legislation:F2024C01258:clause:4_4:p23
Version: federal_register_of_legislation:F2024C01258
Segment Type: clause
Provision Reference: sch 4 cl 4 (pt 23/75)
Character Range: 104842–107526

disclose CDR data) applies as if:
 (a) a reference to the data holder were a reference to the primary data holder; and
 (b) the following subrule were added after subrule 4.25(2) (withdrawal of authorisation by CDR consumer):
 "(3) For subrule (2), giving effect to withdrawal includes cancelling any current requests to the secondary data holder by the primary data holder under subrule 1.23(4).".

1.24  SR data disclosed to primary data holder not to be used for other purposes
 (1) A primary data holder must not use the service mentioned in subrule 1.20(2) other than to request SR data that it needs to respond to an SR data request.
 (2) Where a secondary data holder provides SR data to a primary data holder in response to such a request:
 (a) the primary data holder must not use or disclose the SR data for a purpose other than responding to the SR data request; and
 (b) once the primary data holder has responded to the SR data request, it must delete any of the SR data that it holds in accordance with the CDR data deletion process.
Note : See rule 1.18 for the definition of "CDR data deletion process".

1.25  Dealing with unsolicited SR data
  If a primary data holder:
 (a) collects SR data from a secondary data holder:
 (i) purportedly under these rules; but
 (ii) not as the result of seeking to collect that SR data under these rules; and
 (b) is not required to retain that SR data by or under an Australian law or a court/tribunal order;
  the primary data holder must destroy the SR data as soon as practicable.
Note: This rule is a civil penalty provision (see rule 9.8).

1.26  Dispute resolution—primary data holders and secondary data holders
  Where a primary data holder requests relevant information from a secondary data holder in relation to a consumer complaint or dispute with the primary data holder that relates to an SR data request, the secondary data holder must provide the information to the extent that it is reasonable to do so.

Part 2—Product data requests

2.1  Simplified outline of this Part

      This Part deals with product data requests. Such requests are made using a data holder's product data request service.
      A product data request may be for required product data, voluntary product data, or both. The content of these terms is different in different designated sectors:  Schedule 3 provides the content for the banking sector;  Schedule 4 provides the content for the energy sector.
      When requested in accordance with this Part, a data holder:
             • must, subject to an exception outlined in this Part, disclose required product data; and
             • may, but is not required to, disclose voluntary