54Paragraphs 7.5(1)(a), (b) and (c)

54  Paragraphs 7.5(1)(a), (b) and (c)

Repeal the paragraphs, substitute:

 (a) using the CDR consumer’s CDR data to provide goods or services requested by the CDR consumer (the existing goods or services):

 (i) in compliance with the data minimisation principle; and

 (ii) in accordance with a current use consent from the CDR consumer, other than a direct marketing consent;

 (aa) in accordance with a current use consent, de‑identifying the CDR consumer’s CDR data in accordance with the CDR data de‑identification process and:

 (i) using the de‑identified data for general research; or

 (ii) disclosing (including by selling) the de‑identified data;

 (b) directly or indirectly deriving CDR data from the collected CDR data in order to use the data in accordance with paragraph (a) or (aa);

 (c) for the purpose of providing the existing goods or services—disclosing, to the CDR consumer, any of their CDR data;

 (ca) subject to rule 7.5A, disclosing the CDR consumer’s CDR data in accordance with a current disclosure consent;