Competition and Consumer (Consumer Data Right) Rules 2020 4.3: Rule 4.3: seek collection, use and disclosure consents only in accordance with Division 4.3

Where a consumer asks an accredited person for goods or services that need its CDR data from a CDR participant, the accredited person may ask for a collection consent and a use consent, and may ask for a disclosure consent at the same time or after collection consent is given. For an affiliate whose data will be collected by its sponsor, the collection consent request must say so, and the consent also covers the sponsor's collection. The consents give the accredited person a valid request to seek to collect, which ceases if the collection consent is withdrawn (seeking to collect without a valid request contravenes privacy safeguard 3). Any request for consents for a Part 4 consumer data request must be made in accordance with Division 4.3 (civil penalty).