Commonwealth Consolidated Acts

COMPETITION AND CONSUMER ACT 2010 - SECT 56EN

Disclosures by data holders

  (1)   If a data holder of CDR data is required or authorised under the consumer data rules to disclose the CDR data, the data holder must take reasonable steps to ensure that the CDR data is, having regard to the purpose for which it is held, accurate, up to date and complete.

Note:   This subsection is a civil penalty provision (see section   56EU).

Disclosures by accredited data recipients

  (2)   If an accredited data recipient of CDR data is disclosing the CDR data when:

  (a)   required under the consumer data rules to do so in response to a valid request from a CDR consumer for the CDR data; or

  (b)   otherwise required, or authorised, under the consumer data rules to do so;

the accredited data recipient must take reasonable steps to ensure that the CDR data is, having regard to the purpose for which it is held, accurate, up to date and complete.

Note 1:   This subsection is a civil penalty provision (see section   56EU).

Note 2:   The valid request referred to in paragraph   (a) could be given through a designated gateway (see section   56BG).

  (3)   If a CDR participant for CDR data:

  (a)   makes a disclosure referred to in subsection   (1) or (2) for a CDR consumer; and

  (b)   later becomes aware that some or all of the CDR data was incorrect when it was disclosed because, having regard to the purpose for which it was held, it was inaccurate, out of date or incomplete;

the CDR participant must advise the CDR consumer accordingly in accordance with the consumer data rules.

Note:   This subsection is a civil penalty provision (see section   56EU).

Disclosing corrected CDR data

  (4)   If:

  (a)   a CDR consumer for CDR data is advised under subsection   (3) by a CDR participant for the CDR data that some or all of the CDR data was incorrect when the CDR participant had earlier disclosed it; and

  (b)   the CDR consumer requests, in accordance with the consumer data rules, the CDR participant to fix this by disclosing the corrected CDR data;

the CDR participant must comply with the request by disclosing the corrected CDR data, in accordance with the consumer data rules, to the recipient of that earlier disclosure.

Note:   This subsection is a civil penalty provision (see section   56EU).

  (4A)   Subsection   (4) does not apply in the circumstances specified in the consumer data rules.

Purpose for which the CDR data was held

  (5)   When working out the purpose for which the CDR data is or was held, disregard the purpose of holding the CDR data so that it can be disclosed as required under the consumer data rules.

Note:   This subsection is relevant for subsections   (1) and (2) and paragraph   (3)(b).