treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.8
Consumers can request accredited persons to give instructions.
1 After paragraph 56AA(b)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.11
Insertion of phrase for an instrument under subsection 56AC(2)
10 Paragraph 56AD(1)(c)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.46
Disclosures by accredited data recipients
100 Before subsection 56EM(2)
101 Before subsection 56EM(3)
Must disclose CDR data to notified consumers
102 At the end of section 56EM
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.47
103 Subsections 56EN(3) and (4)
Ensure CDR data is accurate, up to date and complete.
103(2A) Subsections 56EN(3) and (4)
...the action service provider must take reasonable steps to ensure that the CDR data is, having regard to the purpose for which it is held, accurate, up to date and complete.
CDR data has a value (accuracy, completeness)
(2A) If a person as an action service provider for a type of CDR action is required or authorised under the consumer data rules to disclose CDR data...
Must advise CDR consumer of incorrect data after becoming aware.
103(3) Subsections 56EN(3) and (4)
Correct and disclose corrected CDR data to recipient upon request or by law.
103(4) Subsections 56EN(3) and (4)
Obligation to correct and disclose CDR data.
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.48
104 Subsection 56EN(5) (note)
Data holder must correct CDR data upon request from consumer
105 Subsection 56EP(1)
Classifies data holder as entity with obligation to correct CDR data
Exclusion of certain data from response to accredited recipient
106 Paragraph 56EP(2)(b)
and is not given in response to advice from the accredited data recipient under subsection 56EN(3)
Prohibition on disclosure of certain data
Insertion of phrase after subsection (3)
107 Subsection 56EP(2)
108 Subsection 56EP(2) (note)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.49
Subsection 56EN(4) applies instead of this subsection if the request is given in response to advice from the accredited data recipient under subsection 56EN(3).
109 At the end of subsection 56EP(2)
Insertion of phrase before certain words
11 Paragraph 56AD(1)(d)
The Information Commissioner may assess an action service provider's compliance with privacy safeguards and consumer data rules.
110 After subsection 56ER(1A)
An assessment of an action service provider's compliance must be made during the time the action service provider has been or may be disclosed CDR data.
The assessment is made during the time the action service provider has been or may be disclosed CDR data.
The Information Commissioner may assess an action service provider's compliance.
An action service provider must comply with the privacy safeguards and consumer data rules.
Obligation to comply with privacy safeguards and consumer data rules.
An action service provider must maintain CDR data in accordance with the privacy safeguards.
The action service provider is maintaining CDR data in accordance with the privacy safeguards.
An action service provider must handle CDR data in accordance with the consumer data rules.
The action service provider is handling CDR data in accordance with the consumer data rules.
An assessment of an action service provider's compliance must be made public.
The Information Commissioner may diffuse information about an action service provider's compliance with privacy safeguards and consumer data rules.
Omit “or (1A)”, substitute “, (1A) or (1B)”.
111 Subsections 56ER(2) and (3)
Repeal heading and substitute with new text
112 Subsection 56ES(2) (table, heading to column headed
113 At the end of section 56ES
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.50
Omit “or accredited person”, substitute ‘, accredited person or action service provider for a type of CDR action’.
114 Paragraph 56ET(3)(a)
Disclosure of CDR data under consumer data rules for action service providers.
115 After paragraph 56ET(4)(c)
116 Subsection 56ET(4) (table, heading to column headed
Disclosure of CDR data under consumer data rules is required.
117 Subsection 56ET(4) (at the end of the cell at table item 5,
Subject: Disclosure of CDR data under consumer data rules
Omit “respondent; and”, substitute “respondent; or”.
118 Subparagraph 56ET(5)(b)(iii)
Action service provider is respondent in case of complaint about CDR data disclosure
119 After subparagraph 56ET(5)(b)(iii)
Action service provider is the respondent during the complaint period
Action service provider is respondent during complaint period
Consumer has been or may be disclosed CDR data under consumer data rules
Action service provider is the respondent
Consumer has been or may be disclosed CDR data
Action service provider must be the respondent
Action service provider must be respondent in case of complaint
Action service provider is the respondent in case of complaint
Insertion of section reference after subsection 56AC(2)
12 Subsections 56AD(2) and (3)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.51
Disclose CDR data under consumer data rules if breach of privacy safeguard
120 At the end of paragraph 56ET(5)(d)
Action service provider has been or may be disclosed CDR data
Disregard reference to individual in section 39 of the Privacy Act 1988 for purposes of item 3 of the table in subsection (4)
121 At the end of section 56ET
Omit “or (2)”, substitute “, (2) or (4)”.
122 Paragraph 56EU(1)(i)
Prohibits omitting “or (2)”, requiring substitution.
123 Paragraph 56EU(1)(j)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.52
124 Subsection 4(1)
Repeal the definition of Data Recipient Accreditor
125 Subsection 4(1) (definition of Data Recipient Accreditor)
Substitute CDR Accreditor for Data Recipient Accreditor
126 Paragraph 56BH(1)(a)
Omit 'Data Recipient Accreditor', substitute 'CDR Accreditor'.
127 Subparagraph 56BI(1)(h)(i)
Replace 'Data Recipient Accreditor' with 'CDR Accreditor'
128 Subsection 56CA(1)
Substitute CDR Accreditor for Data Recipient Accreditor.
129 Section 56CB
Repeal heading and substitute with new text.
13 Section 56AE (heading)
Repeal heading and substitute with new title
130 Subdivision C of Division 3 of Part IVD (heading)
131 Section 56CG (heading)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.53
132 Subsection 56CG(1)
133 Section 56CG (note 2)
Omit 'of Data Recipient Accreditor', substitute 'of CDR Accreditor'.
134 Section 56CG (note 2)
Continues existing appointment of CDR Accreditor under amended subsection 56CG(1) of the Competition and Consumer Act 2010.
135 Transitional—current Data Recipient Accreditor
Temporal interval on which the appointment continues
136 Subsections 56CH(1) and (2)
Substitution of terms in subsection 56CH(2)
137 Subsection 56CH(2)
138 Subsection 56CH(3)
Substitute CDR Accreditor for Data Recipient Accreditor in Schedule 1
139 Paragraph 56CH(4)(a)
14 Subsection 56AE(1)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.54
Replace 'Data Recipient Accreditor's' with 'CDR Accreditor's'
140 Subsection 56CH(4)
141 Subsections 56CI(1) and (3)
142 Subsection 56CJ(1)
143 Subsection 56CJ(1)
144 Subparagraph 56CJ(1)(b)(ii)
145 Subsection 56CJ(2)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.55
Definitions for action service provider, CDR action, and CDR action participant.
146 Subsection 4(1)
Insertion of new clause (3A) after existing clause (3)
147 Subsection 4(1) (definition of CDR consumer)
Definitions for CDR declaration and voluntary action service provider.
148 Subsection 4(1)
149 Paragraph 56AC(2)(b)
15 Subparagraph 56AE(1)(b)(ii)
150 Subsection 56AC(2) (note 2)
Insertion of phrase after 'Constitution)
151 Subparagraph 56AD(1)(c)(i)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.56
Inserts provisions from other instruments under this Part
152 After paragraph 56AN(c)
Omit “or (c)”, substitute “, (c) or (ca)”.
153 Paragraph 56AN(d)
154 Subsection 56AO(1)
155 After subsection 56AO(3)
CDR provisions apply to all persons, including foreign persons.
155(3A) After subsection 56AO(3)
CDR provisions have effect in relation to a CDR action
CDR provisions apply to acts or omissions by Australian persons or occurring wholly or partly in Australia.
155(3B) After subsection 56AO(3)
The CDR provisions only apply if the act or omission occurs wholly or partly in Australia.
The CDR provisions have effect in relation to an act, or omission, relating to a CDR action.
To the extent that the CDR provisions have effect in relation to an act, or omission, relating to a CDR action.
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.57
Insertion of clause (3B) after clause (3)
156 Subsection 56AO(4)
157 Subsection 56AO(5)
158 Subsections 56AR(2) and (3)
Entity must be declared as participating entity for specified capacities.
158(2) Subsections 56AR(2) and (3)
Applicability of CDR provisions to entities
158(3) Subsections 56AR(2) and (3)
(a) the CDR provisions relate to a CDR consumer for CDR data, and the entity is a CDR consumer for CDR data (or would be if the entity were a person);
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.58
Confers functions necessary for entity to operate as accredited person
159 After paragraph 56AR(5)(a)
Substitute primary regulator for an instrument under subsection 56AC(2)
16 Subparagraph 56AE(1)(c)(iii)
Confer functions necessary for entity to operate as action service provider
160 At the end of subsection 56AR(5)
Declare entity as participating entity in specified capacities.
161 Subsection 56AS(1)
162 Subsections 56AS(2) and (3)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.59
Existing declarations of participating entities continue in force.
163 Transitional—existing declarations of participating
Add an action service provider for a type of CDR action.
164 Subsection 56AU(3) (at the end of the definition of CDR
Delete CDR data if a valid request is made
165 Subsection 56BAA(1)
Prohibits deleting CDR data in response to a valid request
166 Subsection 56BAA(2)
167 Subparagraph 56BD(1)(b)(v)
Insertion of 'or types of CDR actions' after 'designated sectors'
168 Paragraph 56DA(1)(a)
Insert CDR action participants and consumers
169 After subparagraph 56DA(1)(b)(iii)
Requires relation between identifiable temporal intervals
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.12
17 Section 56AEA (heading)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.60
170 Subparagraph 56DA(1)(b)(iv)
Defines valid instruction format and description for CDR action
171 After paragraph 56FA(1)(d)
Insert different provisions for different types of CDR actions
172 After paragraph 56FB(1)(b)
Insert different provisions for different classes of action service providers
173 After paragraph 56FB(1)(c)
Repeal paragraph and substitute with new text
174 Paragraph 56FB(2)(b)
Defines contract force between action service provider and accredited initiators under a binding data standard.
175 After subsection 56FD(2)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.61
Insertion of phrase after 'Delegation by'
176 Section 56GAA (heading)
177 Before subsection 56GAA(1)
Delegation of minister's functions or powers to SES employees
177(1A) Before subsection 56GAA(1)
The Minister can delegate functions or powers
The Minister may delegate functions or powers in writing
Delegation by the Secretary must comply with written directions of the Minister.
177(1B) Before subsection 56GAA(1)
Written directions of the Minister are a temporal interval within which the delegate must comply
Written directions are a temporal interval within which the delegate must comply
Delegate must perform delegated function or exercise delegated power
Complying with written directions of the Minister implies delegation by the Secretary
Compliance with written directions implies delegation by the Secretary
Delegation by the Secretary is a type of artificial intelligence application
Comply with written directions of the Minister
Written directions of the Minister are a type of information that must be disseminated to the delegate
Written directions are a type of information that must be disseminated to the delegate
The CDR provisions do not exclude or limit the operation of other laws.
178 Section 56GAB
Inserts CDR declarations for types of CDR actions
179 After paragraph 56GB(1)(a)
18 Section 56AEA
Repeal heading and substitute with Schedule 1 Amendments
180 Section 56GC (heading)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.62
No liability for actions taken in good faith and compliance with laws.
181 Subsection 56GC(1)
CDR entity is a data holder, accredited data recipient, or designated gateway.
Exempt from provisions covered by this section
182 Subsection 56GD(2)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.63
Continuation of existing exemptions under subsection 56GD(2) of the Competition and Consumer Act 2010
183 Transitional—existing exemptions by Commission
Exempt particular persons or classes from specified provisions.
184 Subsection 56GE(2)
Exemptions are a subclass of regulations.
Classify exemptions as subclasses of regulations
Exemptions are a subclass of regulations
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.64
Continuation of existing regulations under Competition and Consumer Act 2010
185 Transitional—existing exemptions and modifications by
Repeal section and substitute with new provision
186 Section 56GF
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.66
Substitute certain sections with new ones.
187 Subsection 75B(1)
Substitute specific sections and subsections.
188 Subparagraph 76(1)(a)(ib)
189 Subsection 76(1A) (table item 9)
19 Section 56AF (heading)
190 Subsections 76B(2), (3) and (4)
191 Paragraph 76B(5)(a)
192 Subparagraphs 79A(1)(a)(i) and 79B(a)(ii)
193 Subparagraph 80(1)(a)(iib)
Prohibits omission of specified sections.
Omit section 56CC(1) and substitute with 56BZI(1)
194 Paragraphs 80(9)(a) and (b)
195 Paragraph 82(1)(c)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.67
Substitute section 56BZI(1) for section 56CC(1)
196 Subparagraph 83(1)(a)(ii)
197 Subparagraph 83(1)(b)(iii)
198 Paragraph 84(1)(a)
199 Paragraph 84(1)(b)
Prohibits omission of specified sections
2 Paragraph 56AA(c)
20 Section 56AH
200 Paragraph 84(3)(a)
201 Paragraph 84(3)(b)
202 Subsection 86(1A)
203 Subsection 86(2)
Substitute specific sections and subsections in Schedule 1
204 Paragraph 86A(1)(b)
Imposes a duty on the legislative body to make the substitution
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.68
205 Subsection 86C(4) (paragraph (a) of the definition of
Prohibits omission of specified sections or subsections
206 Paragraph 86D(1)(b)
207 Subsection 86D(1A)
208 Paragraph 86E(1)(a)
209 Paragraph 86E(1A)(a)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.13
21 Before subsection 56AI(1)
210 Subsection 87(1)
211 Subsection 87(1)
212 Paragraphs 87(1A)(a), (b) and (baa)
213 Paragraph 87(1A)(ba)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.69
214 Subsection 87(1C)
Inserts an agency with foreign supervision or regulation function
215 After paragraph 157AA(3)(a)
216 Paragraph 163(2)(a)
217 Subsection 163A(4B)
218 Paragraph 163A(4C)(a)
219 Subsection 163A(4D)
22 Subsection 56AI(1)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.70
Inserts the last reference in section 26WA
220 Before subparagraph 56ES(4)(a)(i)
221 Subparagraph 56ES(4)(a)(ii)
Add references from Division 4 of Part IIIC
222 At the end of paragraph 56ES(4)(a)
Insertion of words in a specific paragraph
23 Paragraph 56AI(1)(a)
Authorisation for use of consumer data by accredited action initiators
24 After paragraph 56AI(1)(a)
Repeal paragraph and substitute with new provision
25 Paragraph 56AI(1)(b)
26 Subsection 56AI(1) (note 2)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.14
Meaning of directly or indirectly derived
27 Before subsection 56AI(2)
28 Before subsection 56AI(3)
29 After subparagraph 56AI(3)(b)(ii)
Service providers must perform actions in accordance with data standards if they ordinarily do so.
3 Section 56AB
Actions are regulated by data standards.
Substitute “, (ii) or (iia)” for “or (ii)”,
30 Subparagraph 56AI(3)(b)(iii)
Substitute 'exclusions' for 'conditions'
31 Paragraph 56AI(3)(d)
A person is a CDR consumer for a CDR action if certain conditions are met.
32 After subsection 56AI(3)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.15
33 Paragraph 56AJ(1)(d)
34 Subsection 56AJ(2) (heading)
Conditions must be met for consumer data rules.
35 After paragraph 56AJ(3)(b)
Disclosure of CDR data to a person is prohibited if they are not a core data holder.
36 After subsection 56AJ(3)
The person is not a core data holder, but is a voluntary action service provider for a type of CDR action.
The person is not a core data holder, but is a voluntary action service provider for a type of CDR action; and
Disclosing CDR data to a person is prohibited.
Neither the CDR data nor any other CDR data from which it was directly or indirectly derived was disclosed to the person.
The person must not disclose CDR data if they are not a core data holder.
Neither the CDR data nor any other CDR data from which it was directly or indirectly derived was disclosed to the person under the consumer data rules; and
The classes of data holders declared in the CDR declaration for that type of CDR action include the core data holders.
The designation instrument also specifies, as described in paragraph 56AC(2)(b), a class of persons (the core data holders) as holding a class of information to which the CDR data belongs.
The designation instrument also specifies, as described in paragraph 56AC(2)(b), a class of persons (the core data holders) as holding a class of information to which the CDR data belongs; and
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.16
37 Subsection 56AJ(4) (heading)
Person specified in designation instrument and meets conditions must comply with CDR data rules.
38 At the end of section 56AJ
Conditions specified in consumer data rules are met
Person meets conditions specified in consumer data rules
Person specified in designation instrument and meets conditions
Class of information to which the CDR data belongs
Designation instrument specifies class of persons holding such information
39 Section 56AK
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.10
Repeal heading and substitute with new designation
4 Subdivision B of Division 1 of Part IVD (heading)
Repeal paragraph and substitute with new provision regarding CDR data disclosure.
40 Paragraph 56AK(c)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.17
41 After paragraph 56AK(d)
Restricts holding CDR data to specific time periods
The first-mentioned CDR data is not being held by (or on behalf of) the person as an action service provider for a type of CDR action.
CDR data is not being held by (or on behalf of) the person as an action service provider for a type of CDR action.
Authorisation required for using CDR data
42 At the end of section 56AK
The authorisation is valid during the relevant time period
Authorisation is valid during the preparation or giving of an instruction
The person is authorised by the consumer data rules to use or disclose that information to prepare or give a valid instruction for the performance of the CDR action on behalf of the CDR consumer
The person is authorised by the consumer data rules
The rules have the authority to authorise
Paragraph 56BGA(1)(d) ensures the rules can give the authorisation referred to in paragraph (b) of this subsection
The rules have the authority to disclose information
43 After section 56AM
Person must be within a class of data holders or voluntary action service provider for CDR action. A CDR action is an action of a type declared under section 56ACA.
43(1) After section 56AM
The action occurs during the declaration period
(1) A CDR action is an action of a type declared under section 56ACA.
The declaration is used in AI processing
Class of data holders declared in CDR declaration
The declaration is propagated to the action
The action ends before the declaration period
Declaration of CDR action type under section 56ACA.
43(2) After section 56AM
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.19
Insertion of additional terms in CDR actions
44 Subsection 56BA(1)
Add different rules for different types of CDR actions
45 At the end of subsection 56BA(2)
46 After paragraph 56BB(c)
Substitute accreditation phrase in Part 56BB(d)
47 Paragraph 56BB(d)
Approving persons for voluntary action service providers
48 After paragraph 56BB(d)
Granting permission for data holder of other CDR data
49 At the end of paragraph 56BC(1)(a)
Data holder of other CDR data is allowed
Minister may declare types of actions for which instruction can be given under consumer data rules.
5 After section 56AC
50 Subsection 56BD(1) (heading)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.20
Repeal paragraph and substitute with new obligation
51 Paragraph 56BD(1)(a)
Replace existing obligation with new one
List of data holders and action service providers for CDR data
52 After subparagraph 56BD(1)(b)(iv)
53 Subparagraph 56BD(1)(b)(v)
Repeal note and substitute with new definition for CDR data disclosure
54 Subsection 56BD(1) (note 1)
Cannot include rules affecting data holder that relate to deletion of CDR data unless disclosure under consumer data rules.
55 Subsection 56BD(3)
Prohibition on rules affecting data holder that relate to deletion of CDR data unless disclosure under consumer data rules.
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.21
56 After section 56BG
Minister’s tasks before designating a sector or declaring actions etc.
56AD Minister’s tasks before designating a sector or declaring
Secretary must arrange for analysis, consultation and report about an instrument proposing to designate a sector or declare actions
56AE Secretary must arrange for analysis, consultation and report
Secretary must arrange for analysis, consultation and report
Information Commissioner must analyse and report about an instrument proposing to designate a sector or declare actions
56AF Information Commissioner must analyse and report about an
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.24
56BH Rules about accreditation for the purposes of this Part
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.31
56BV Commission may intervene if fee for disclosing or using
Commission may determine fee for disclosing or using CDR data
56BV(1) Commission may intervene if fee for disclosing or using
Defines fee for disclosing or using CDR data
56BV(2) Commission may intervene if fee for disclosing or using
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.43
No one can collect CDR data from another person unless specified in Schedule 1 Amendments
56EF Privacy safeguard 3—soliciting CDR data from participants
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.45
56EG Privacy safeguard 4—dealing with unsolicited CDR data from
Destroy CDR data as soon as practicable after collecting it if certain conditions are met.
56EG(1) Privacy safeguard 4—dealing with unsolicited CDR data from
Temporal interval for destruction of CDR data
Destroy CDR data as soon as practicable after collecting it
The collector collected the CDR data while covered by column 1 of an item of the following table, and from a person covered by column 2 of that item
Subsection (1) applies to all collection of data from the person mentioned in column 2 of the table.
56EG(2) Privacy safeguard 4—dealing with unsolicited CDR data from
State holds an obligation to protect data.
Protection from liability for complying with CDR requirements
56GC Complying with CDR requirements etc.: protection from
Imposes a duty on the state to protect individuals from liability
56GF Application of the CDR provisions
A person is subject to the CDR provisions if they act or omit to act in a way that affects a corporation's activities.
56GF(1) Application of the CDR provisions
...a way that affects, is capable of affecting or is taken with intent to affect the activities, functions, relationships or business of a corporation.
The CDR provisions apply to a person if...
The CDR provisions apply to certain persons acting or omitting to act in specific courses of conduct.
56GF(2) Application of the CDR provisions
The provision applies to the specified persons.
Gives effect to Australia's obligations under the ICCPR.
56GF(3) Application of the CDR provisions
Section 6 does not apply to persons who are not corporations in relation to the CDR provisions.
56GF(4) Application of the CDR provisions
Section 6 does not apply in relation to the CDR provisions.
Temporal overlap between section 6 and CDR provisions
(4) Section 6 (about the application of this Act to persons who are not corporations)
Infers exclusion from non-corporate persons under section 6
does not apply in relation to the CDR provisions.
Excludes section 6 from non-corporate persons
Diffuses section 6 exclusion to non-corporate persons
Validates exclusion from non-corporate persons under section 6
56GF(5) Application of the CDR provisions
ICCPR is defined as the International Covenant on Civil and Political Rights
57 Section 56BH (heading)
58 After subparagraph 56BH(1)(d)(ii)
Rules for a person accredited at a particular level
59 After paragraph 56BH(1)(d)
6 Section 56AD (heading)
Inserts a note about accreditation for initiating CDR actions under consumer data rules.
60 Before the note to subsection 56BH(1)
61 Subsection 56BH(1) (note)
Repeal subsection, substitute new grounds for varying accreditation
62 Subsection 56BH(3)
Prohibits failing to comply with requirements
Repeal subsection, substitute new grounds
Must permit applications for review of decisions made under consumer data rules
63 Subsection 56BH(4)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.25
Rules for approving persons to be voluntary action service providers for types of CDR actions
64 After section 56BH
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.27
Consumer has power to direct action initiator for CDR actions of that type.
65 After paragraph 56BI(1)(c)
...for the giving of a valid instruction for the performance of...
to give the consumer, or an accredited person, reports about...
Consumer has power to direct action initiator.
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.28
Insertion of additional term in CDR data participants
66 Paragraph 56BI(1)(d)
67 Subsection 56BI(2)
Omit 'or accredited persons,' and substitute 'CDR action participants or accredited persons'.
68 Subsection 56BI(2)
69 Subparagraph 56BJ(f)(i)
7 Subsection 56AD(1)
70 Paragraph 56BJ(g)
Insert an action service provider for a type of CDR action
71 After subparagraph 56BJ(ia)(iii)
Insert amendments to Schedule 1 and changes to the power to make consumer data rules
72 After paragraph 56BK(2)(d)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.29
73 Subsection 56BK(3)
74 Subsection 56BK(4)
Consider certain matters when making a rule about fees for CDR actions
75 After paragraph 56BP(a)
Substitute provisions in section 56AD(1)(a) and (b) with provisions in section 56BP(a) and (aa)
76 Paragraph 56BQ(a)
77 Section 56BR
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.30
78 After subparagraph 56BN(1)(c)(ii)
Substitute specific words in a provision.
79 Subsection 56BN(1) (note)
8 Subparagraph 56AD(1)(a)(vi)
80 After paragraph 56BO(1)(b)
Omit ‘or (b)’, substitute ‘, (b), (c) or (d’.
81 Subsection 56BO(1) (note 1)
82 Subparagraphs 56BU(2)(a)(i) and (ii)
Repeal section and substitute with new amendments.
83 Section 56BV
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.32
84 Sections 56BW to 56BY
Accredited persons must act efficiently, honestly and fairly when initiating CDR actions.
85 At the end of Division 2 of Part IVD
Classifies accredited persons as those who must act efficiently, honestly and fairly
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.40
86 Sections 56CC and 56CD
Repeal of sections 56CC and 56CD applies after commencement
87 Application of repeals
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.41
Privacy safeguards apply to accredited persons and data holders/designated gateways.
88 Section 56EA
Circumstances in which these safeguards can apply include where the person is an accredited action initiator for a type of CDR action.
Repeal of Australian Privacy Principles for accredited persons in relation to CDR data
89 Paragraphs 56EC(4)(aa), (b) and (c)
Prohibition of Australian Privacy Principles
Insert comma after 'information' or types of actions.
9 Paragraph 56AD(1)(b)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.42
Privacy Act 1988 applies to small business operators providing CDRActions.
90 After paragraph 56EC(4)(d)
Imposes duty on small business operators.
Defines scope of Privacy Act 1988 application.
Insert: or (c) a person as an action service provider, for a type of CDR action, in relation to CDR data.
91 After paragraph 56EC(5)(b)
Omit 'or designated gateway', insert 'designated gateway or action service provider'
92 Subsection 56EC(5) (note 1)
Ensure open and transparent management of CDR data
93 Subsection 56ED(1)
Subclass of obligations related to data management
94 Paragraph 56ED(3)(c)
CDR entity must provide information to consumers about access and complaint procedures.
95 After subsection 56ED(6)
Contains part of the consumer data rules.
Repeal sections and substitute with new provisions.
96 Sections 56EF and 56EG
97 Section 56EH (before the note)
98 Section 56EH (note)
99 Before subsection 56EM(1)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.5
1 Short title
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.6
1 Section 1
2 Commencement
2 Section 2
26 August 2024
27 August 2024
Note: This table relates only to the provisions of this Act as originally enacted.
3 Section 3
Legislation in Schedules is amended or repealed according to its terms.
3 Schedules
An Act to amend the Competition and Consumer Act 2010, and for related purposes
Treasury Laws Amendment (Consumer Data Right) Act 2024