Competition and Consumer (Consumer Data Right) Rules 2020 4.7: Rule 4.7: refuse authorisation requests or disclosure only on permitted grounds and inform the accredited person

A data holder may refuse to seek an authorisation, to invite amendment, or to disclose required consumer data only where it considers this necessary to prevent physical, psychological or financial harm or abuse, where it has reasonable grounds to believe disclosure would adversely affect the security, integrity or stability of the Register of Accredited Persons or its own ICT systems, for a blocked or suspended account, in circumstances in the data standards, or where another rule forbids disclosure. It must inform the accredited person of the refusal under the data standards (civil penalty).