Consumer Data Right (CDR) Framework (Australia) CDR-PS-12: Privacy Safeguard 12: Security of CDR Data, and Destruction or De-identification

Recipients must protect CDR data from misuse, interference, loss and unauthorised access per the information-security requirements (Schedule 2), and destroy or de-identify redundant CDR data.

Other controls in CDR: Privacy Safeguards (CCA Part IVD Div 5)

CDR-PS-1 Privacy Safeguard 1: Open and Transparent Management of CDR Data
CDR-PS-10 Privacy Safeguard 10: Notifying of the Disclosure of CDR Data
CDR-PS-11 Privacy Safeguard 11: Quality of CDR Data
CDR-PS-13 Privacy Safeguard 13: Correction of CDR Data
CDR-PS-2 Privacy Safeguard 2: Anonymity and Pseudonymity
CDR-PS-3 Privacy Safeguard 3: Seeking to Collect CDR Data from CDR Participants
CDR-PS-4 Privacy Safeguard 4: Dealing with Unsolicited CDR Data
CDR-PS-5 Privacy Safeguard 5: Notifying of the Collection of CDR Data

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Consumer Data Right (CDR) Framework (Australia) controls