56BIRules about reporting, record keeping and auditing

56BI Rules about reporting, record keeping and auditing

(1) Without limiting paragraph 56BB(e), the consumer data rules may include the following rules:

(a) a power for a CDR consumer for CDR data to direct a CDR participant for the CDR data to give the consumer, or an accredited person, reports about:

(i) the consumer’s valid requests to the CDR participant, under rules like those described in paragraph 56BC(1)(a) or 56BG(1)(a), for the CDR data; and

(ii) any disclosures made in response to such requests;

(b) a power for a CDR consumer for CDR data to direct a CDR participant for the CDR data to give the consumer, or an accredited person, reports about:

(i) the consumer’s valid consents to the CDR participant, under rules like those described in paragraph 56BC(2)(a) or (b) or 56BG(1)(b), for the CDR data; and

(ii) any disclosures made in response to such consents;

(c) a power for a person referred to in paragraph 56BG(1)(a) or (b) to direct a designated gateway referred to in that paragraph to give reports about:

(i) valid requests or consents, affecting the designated gateway, under rules like those described in that paragraph; and

(ii) any disclosures made in response to such requests or consents;

(ca) a power for a CDR consumer for a CDR action to direct an accredited action initiator for CDR actions of that type to give the consumer, or an accredited person, reports about:

(i) the consumer’s valid request made to the initiator, under rules like those described in subsection 56BGA(1), for the giving of a valid instruction for the performance of the CDR action; or

(ii) a valid instruction given by the initiator, under rules like those described in subsection 56BGA(1), on behalf of the consumer and for the performance of the CDR action;

(cb) a power for a CDR consumer for a CDR action to direct an action service provider for CDR actions of that type to give the consumer, or an accredited person, reports about the provider’s processing of any valid instruction given to the provider:

(i) on behalf of the consumer under rules like those described in subsection 56BGA(1); and

(ii) for the performance of the CDR action;

(d) requirements for CDR participants for CDR data, or CDR action participants, to give reports to the Commission or the Information Commissioner;

(e) requirements for accredited persons to give reports to the Commission or the Information Commissioner;

(f) requirements for designated gateways for CDR data to give reports to the Commission or the Information Commissioner;

(g) requirements for the keeping of records relating to the operation of the consumer data rules;