Competition and Consumer (Consumer Data Right) Rules 2020

Part 7: Rules relating to the privacy safeguards – Competition and Consumer (Consumer Data Right) Rules 2020

Competition and Consumer (Consumer Data Right) Rules 2020 7.3B: Rule 7.3B: answer for outsourced service providers that fail to destroy unsolicited data

An accredited person breaches this subrule (civil penalty) if a direct or indirect OSP of it or of its CDR representative fails to comply with section 56EG of the Act for service data as if it were an accredited person that had collected it, whether or not the OSP acted within the outsourcing arrangement.

Maintained by Gerard Blokdyk

Other controls in Part 7: Rules relating to the privacy safeguards – Competition and Consumer (Consumer Data Right) Rules 2020

7.10 Rule 7.10: notify consumers within 5 business days of disclosing incorrect CDR data
7.10A Rule 7.10A: answer for representatives that breach the data quality safeguard
7.11 Rule 7.11: take the Schedule 2 security steps, including through OSPs and representatives
7.12 Rule 7.12: de-identify redundant data only where the consumer was told and did not elect deletion
7.13 Rule 7.13: otherwise delete redundant data under the deletion process
7.14 Rule 7.14: charge no fee for handling correction requests
7.15 Rule 7.15: respond to correction requests within 10 business days with a written notice
7.16 Rule 7.16: answer for representatives that fail to handle correction requests

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Competition and Consumer (Consumer Data Right) Rules 2020 controls