56ECRelationship with other laws

56EC Relationship with other laws

Relationship with the consumer data rules

(1) If there is an inconsistency between the privacy safeguards and the consumer data rules, those safeguards prevail over those rules to the extent of the inconsistency.

(2) However, the consumer data rules are taken to be consistent with the privacy safeguards to the extent that they are capable of operating concurrently.

Note: This means that the privacy safeguards do not cover the field that they deal with.

Relationship with the Privacy Act 1988

(3) This Division does not limit Part IIIA (about credit reporting) of the Privacy Act 1988. However, the regulations may declare that in specified circumstances that Part applies in relation to CDR data as if specified provisions of that Part were omitted, modified or varied as specified in the declaration.

(4) Despite the Privacy Act 1988:

(a) the Australian Privacy Principles do not apply to an accredited data recipient of CDR data in relation to the CDR data; and

(aa) if section 56ED or 56EE applies to an accredited person in relation to CDR data—the corresponding Australian Privacy Principle does not apply to the accredited person in relation to the CDR data; and

(ab) if section 56EF or 56EG applies to a person:

(i) who is an accredited person; or

(ii) as a CDR action participant;

in relation to CDR data—the corresponding Australian Privacy Principle does not apply to the person in relation to the CDR data; and

(b) if section 56EN applies to a disclosure of CDR data by a person:

(i) who is a data holder of the CDR data; or

(ii) as an action service provider for a type of CDR action;

then Australian Privacy Principle 10 does not apply to the person in relation to that disclosure of the CDR data; and

(c) if subsection 56EP(1) applies to CDR data and a person:

(i) who is a data holder of the CDR data; or

(ii) as an action service provider for a type of CDR action;

then Australian Privacy Principle 13 does not apply to the person in relation to the CDR data; and

(d) Australian Privacy Principles 6, 7 and 11 do not apply to a designated gateway for CDR data in relation to the CDR data; and

(e) if a small business operator (within the meaning of the Privacy Act 1988) is an action service provider for a type of CDR action, the Privacy Act 1988 applies:

(i) subject to paragraphs (ab) to (c) of this subsection; and

(ii) in relation to personal information disclosed to the provider under the consumer data rules;