Competition and Consumer (Consumer Data Right) Rules 2020 4.28: Rule 4.28: tell the account holder when a secondary user amends or withdraws an authorisation or it expires

Where an accredited person makes a request on behalf of a secondary user and the secondary user amends or withdraws an authorisation, or it expires, the data holder must notify the account holder as soon as practicable through its ordinary means of contacting the account holder (civil penalty).