Competition and Consumer (Consumer Data Right) Rules 2020 S1-2.2: Schedule 1 clause 2.2: sponsors run a third-party management framework over their affiliates

An accredited person proposing to sponsor a person that has or will seek sponsored accreditation must have a defined third-party management framework that will ensure the affiliate keeps appropriate information security capabilities, covering due diligence before new relationships, annual review and assurance, and reporting, and must give the person appropriate assistance or training on Schedule 2. A sponsor must maintain the framework and manage the affiliate relationship under it, keep providing that assistance or training, and take reasonable steps to ensure the affiliate complies with Schedule 2.