(1) If a person (the prospective participant ) makes an access request, the CEO must:
(a) decide whether or not the prospective participant meets the access criteria; or
(b) make one or more requests under subsection 26(1).
(2) The CEO must do a thing referred to in paragraph (1)(a) or (b) within the following number of days of receiving the access request:
(a) 21 days, unless paragraph (b) applies;
(b) if the National Disability Insurance Scheme rules prescribe a lesser number of days for the purposes of this paragraph--that lesser number of days.