(1) Without limiting paragraph 56BB(e), the consumer data rules may include the following rules:
(a) a power for a CDR consumer for CDR data to direct a CDR participant for the CDR data to give the consumer, or an accredited person, reports about:
(i) the consumer's valid requests to the CDR participant, under rules like those described in paragraph 56BC(1)(a) or 56BG(1)(a), for the CDR data; and
(ii) any disclosures made in response to such requests;
(b) a power for a CDR consumer for CDR data to direct a CDR participant for the CDR data to give the consumer, or an accredited person, reports about:
(i) the consumer's valid consents to the CDR participant, under rules like those described in paragraph 56BC(2)(a) or (b) or 56BG(1)(b), for the CDR data; and
(ii) any disclosures made in response to such consents;
(c) a power for a person referred to in paragraph 56BG(1)(a) or (b) to direct a designated gateway referred to in that paragraph to give reports about:
(i) valid requests or consents, affecting the designated gateway, under rules like those described in that paragraph; and
(ii) any disclosures made in response to such requests or consents;
(ca) a power for a CDR consumer for a CDR action to direct an accredited action initiator for CDR actions of that type to give the consumer, or an accredited person, reports about:
(i) the consumer's valid request made to the initiator, under rules like those described in subsection 56BGA(1), for the giving of a valid instruction for the performance of the CDR action; or
(ii) a valid instruction given by the initiator, under rules like those described in subsection 56BGA(1), on behalf of the consumer and for the performance of the CDR action;
(cb) a power for a CDR consumer for a CDR action to direct an action service provider for CDR actions of that type to give the consumer, or an accredited person, reports about the provider's processing of any valid instruction given to the provider:
(i) on behalf of the consumer under rules like those described in subsection 56BGA(1); and
(ii) for the performance of the CDR action;
(d) requirements for CDR participants for CDR data, or CDR action participants, to give reports to the Commission or the Information Commissioner;
(e) requirements for accredited persons to give reports to the Commission or the Information Commissioner;
(f) requirements for designated gateways for CDR data to give reports to the Commission or the Information Commissioner;
(g) requirements for the keeping of records relating to the operation of the consumer data rules;
(h) requirements for each of the following entities:
(i) the CDR Accreditor;
(ii) the Accreditation Registrar;
(iii) the Data Standards Chair;
to give reports to the Commission or the Information Commissioner about that entity's functions or powers.
Note: Information or documents relating to compliance with the consumer data rules may also be required to be given (see subsections 155(1) and (2)).
(2) Without limiting subsection (1), the consumer data rules may include requirements for CDR participants or designated gateways for CDR data, CDR action participants or accredited persons to give to the Commission or Information Commissioner:
(a) copies of one or more of the records required to be kept as described in paragraph (1)(g); or
(b) information from such records;
either periodically, or on request by the Commission or Information Commissioner, or both.