56EHPrivacy safeguard 5—notifying of the collection of CDR data

56EH Privacy safeguard 5—notifying of the collection of CDR data

If an accredited data recipient of CDR data collected the CDR data in accordance with section 56EF, the accredited data recipient must:

(a) take the steps specified in the consumer data rules to notify CDR consumers for the CDR data of the collection; and

(b) ensure that this notification:

(i) is given to those of the CDR consumers (if there are more than one) that the consumer data rules require to be notified; and

(ii) covers the matters specified in those rules; and

(iii) is given at or before the time specified in those rules.

Note 1: The accredited data recipient could have collected the CDR data in accordance with section 56EF as an accredited action initiator, and from an action service provider, for the purposes of giving a valid instruction of the kind described in item 2 of the table in that section.

Note 2: This section is a civil penalty provision (see section 56EU).