Competition and Consumer (Consumer Data Right) Rules 2020 1.16: Rule 1.16: ensure every direct and indirect OSP complies with its outsourcing arrangement

An accredited person that is the OSP chain principal must ensure each direct and indirect OSP complies with its requirements under the relevant CDR outsourcing arrangement, and breaches subrule (2) (civil penalty) if any of them fails to comply with a required provision, meaning one without which the contract would cease to be a CDR outsourcing arrangement. The same applies, under subrules (3) and (4), to OSPs a CDR representative is permitted to engage. Where an accredited person collects as an OSP for another accredited person, the collection and disclosure dashboard rules 7.4 and 7.9 apply only to the principal and the principal must be identified in any rule 7.10 notice.