Competition and Consumer (Consumer Data Right) Rules 2020 3.5: Rule 3.5: refuse direct requests only on permitted grounds and inform the consumer

A data holder may refuse to disclose required consumer data to a consumer only where it considers refusal necessary to prevent physical, psychological or financial harm or abuse, for a blocked or suspended account, or in circumstances set out in the data standards, and must inform the consumer of the refusal in accordance with the data standards (civil penalty). Like rule 3.4, it has no current sector in which it operates.