Competition and Consumer (Consumer Data Right) Rules 2020 1.23: Rule 1.23: handle SR data requests made by accredited persons through the primary data holder

An SR data request by an accredited person is made to the primary data holder through its accredited person request service. Rule 4.5 applies to the primary data holder; if the consumer authorises disclosure, the primary data holder must request the SR data it needs from the secondary data holder under the data standards (civil penalty); the secondary data holder must disclose under the standards or notify a refusal (civil penalty). Rules 4.6, 4.7 and 4.13 and Division 4.4 apply to the primary data holder as the data holder, it need not disclose refused SR data, and giving effect to a withdrawn authorisation includes cancelling current requests to the secondary data holder.