If an accredited data recipient of CDR data collected the CDR data in accordance with section 56EF, the accredited data recipient must:
(a) take the steps specified in the consumer data rules to notify CDR consumers for the CDR data of the collection; and
(b) ensure that this notification:
(i) is given to those of the CDR consumers (if there are more than one) that the consumer data rules require to be notified; and
(ii) covers the matters specified in those rules; and
(iii) is given at or before the time specified in those rules.
Note: This section is a civil penalty provision (see section
56EU).