20Subrule 1.14(3)

20  Subrule 1.14(3)

Repeal the subrule (including the notes), substitute:

 (3) For paragraph (1)(b), the information is the following for each consent:

 (a) details of the CDR data to which the consent relates;

 (b) for a use consent―details of the specific use or uses for which the CDR consumer has given their consent;

 (c) when the CDR consumer gave the consent;

 (d) whether the consent applies:

 (i) on a single occasion; or

 (ii) over a period of time;

 (e) if a collection consent or disclosure consent applies over a period of time:

 (i) what that period is; and

 (ii) how often data has been, and is expected to be, collected or disclosed over that period;

 (f) if the consent is current—when it is scheduled to expire;

 (g) if the consent is not current—when it expired;

 (h) information relating to CDR data that was collected or disclosed pursuant to the consent (see rule 7.4 and rule 7.9);

 (i) details of each amendment (if any) that has been made to the consent.

Note 1: For paragraph (f), consents expire at the latest 12 months after they are given or, in some circumstances, amended: see paragraph 4.14(1)(d).

Note 2:  For the specific uses that are possible, see the data minimisation principle (rule 1.8).

Note 3: The consumer dashboard could contain other information too, for example, the written notices referred to in rule 7.15 (which deals with correction requests under privacy safeguard 13, section 56EP of the Act).