Competition and Consumer Act 2010 Part IVD (Consumer Data Right)
The Act layer of Australia's consumer data right: the duties Part IVD of the Competition and Consumer Act 2010 places directly on data holders, accredited persons, action initiators and action service providers outside the thirteen privacy safeguards, from misleading conduct, fees and holding out to notifiable breaches of CDR data and binding data standards, with the Part's designation, accreditation, standards and enforcement machinery described. Read against compilation No. 167; the safeguards and the consumer data rules are carried in the two companion frameworks.
Competition and Consumer Act 2010 Part IVD (Consumer Data Right) is a compliance framework from Australia with 3 domains and 9 controls that map to 2 other frameworks. The largest domains are Division 2: Consumer data rules, misleading conduct, fees, CDR actions and holding out – Competition and Consumer Act 2010 Part IVD (Consumer Data Right) (7 controls), Division 5: Privacy safeguards (carried in the companion framework) and data breach notification – Competition and Consumer Act 2010 Part IVD (Consumer Data Right) (1 controls), Division 6: Data standards – Competition and Consumer Act 2010 Part IVD (Consumer Data Right) (1 controls). Every control below carries what it requires and what an assessor expects to see.
Get the official standard — this page is an AI-assisted companion tool, not a replacement for the authoritative text.
Visit legislation.gov.auFramework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (3)
Division 2: Consumer data rules, misleading conduct, fees, CDR actions and holding out – Competition and Consumer Act 2010 Part IVD (Consumer Data Right)
| Code | Title |
|---|---|
| competition-and-consumer-act-2010-part-ivd-consumer-data-right::56BO | Sections 56BN and 56BO: never mislead anyone about CDR consumer status, valid requests or consents, or CDR action criteria |
| competition-and-consumer-act-2010-part-ivd-consumer-data-right::56BU | Section 56BU: charge no fee for required disclosures of fee-free CDR data, or beyond the chargeable circumstances or a determined fee |
| competition-and-consumer-act-2010-part-ivd-consumer-data-right::56BZA | Section 56BZA: accredited action initiators act efficiently, honestly and fairly |
| competition-and-consumer-act-2010-part-ivd-consumer-data-right::56BZB | Section 56BZB: initiate CDR actions only on a consumer's valid request and in accordance with the rules |
| competition-and-consumer-act-2010-part-ivd-consumer-data-right::56BZC | Section 56BZC: action service providers perform CDR actions they would ordinarily perform |
| competition-and-consumer-act-2010-part-ivd-consumer-data-right::56BZD | Section 56BZD: charge no discriminatory fees for processing or performing CDR actions |
| competition-and-consumer-act-2010-part-ivd-consumer-data-right::56BZJ | Sections 56BZI and 56BZJ: never hold out as accredited, or as an action service provider, when that is not the case |
Division 5: Privacy safeguards (carried in the companion framework) and data breach notification – Competition and Consumer Act 2010 Part IVD (Consumer Data Right)
| Code | Title |
|---|---|
| competition-and-consumer-act-2010-part-ivd-consumer-data-right::56ES | Section 56ES: notify eligible data breaches of CDR data under the Privacy Act scheme |
Division 6: Data standards – Competition and Consumer Act 2010 Part IVD (Consumer Data Right)
| Code | Title |
|---|---|
| competition-and-consumer-act-2010-part-ivd-consumer-data-right::56FD | Sections 56FD and 56FE: observe the binding data standards that apply to you |
Maps to 2 other frameworks
Coverage is not the same as your position
This page shows what Competition and Consumer Act 2010 Part IVD (Consumer Data Right) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is Competition and Consumer Act 2010 Part IVD (Consumer Data Right) and who does it apply to?
Competition and Consumer Act 2010 Part IVD (Consumer Data Right) is a compliance framework from Australia with 3 domains and 9 controls. The Act layer of Australia's consumer data right: the duties Part IVD of the Competition and Consumer Act 2010 places directly on data holders, accredited persons, action initiators and action service providers outside the thirteen privacy safeguards, from misleading conduct, fees and holding out to notifiable breaches of CDR data and binding data standards, with the Part's designation, accreditation, standards and enforcement machinery described. Read against compilation No. 167; the safeguards and the consumer data rules are carried in the two companion frameworks. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Competition and Consumer Act 2010 Part IVD (Consumer Data Right) actually require?
Competition and Consumer Act 2010 Part IVD (Consumer Data Right) has 9 controls organised across 3 domains. The largest domains are Division 2: Consumer data rules, misleading conduct, fees, CDR actions and holding out – Competition and Consumer Act 2010 Part IVD (Consumer Data Right) (7 controls), Division 5: Privacy safeguards (carried in the companion framework) and data breach notification – Competition and Consumer Act 2010 Part IVD (Consumer Data Right) (1 controls), Division 6: Data standards – Competition and Consumer Act 2010 Part IVD (Consumer Data Right) (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Competition and Consumer Act 2010 Part IVD (Consumer Data Right) do I already cover?
Competition and Consumer Act 2010 Part IVD (Consumer Data Right) maps to 2 other compliance frameworks. The top mapping partners are GDPR (38% coverage), NIST SP 800-53 Rev 5 (2% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement Competition and Consumer Act 2010 Part IVD (Consumer Data Right)?
Start your Competition and Consumer Act 2010 Part IVD (Consumer Data Right) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Competition and Consumer Act 2010 Part IVD (Consumer Data Right) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 9 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 702 frameworks.
Get Started Free →Free forever — no credit card required