Treasury Laws Amendment (Consumer Data Right) Act 2024
An Act to amend the Competition and Consumer Act 2010, and for related purposes
1 Short title
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.5
2 Commencement
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.6
1 Section 1
26 August 2024
2 Section 2
27 August 2024
3 Section 3
Note: This table relates only to the provisions of this Act as originally enacted.
3 Schedules
Legislation in Schedules is amended or repealed according to its terms.
1 After paragraph 56AA(b)
Consumers can request accredited persons to give instructions.
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.8
2 Paragraph 56AA(c)
3 Section 56AB
Service providers must perform actions in accordance with data standards if they ordinarily do so.
Actions are regulated by data standards.
4 Subdivision B of Division 1 of Part IVD (heading)
Repeal heading and substitute with new designation
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.10
5 After section 56AC
Minister may declare types of actions for which instruction can be given under consumer data rules.
6 Section 56AD (heading)
Repeal heading and substitute with new text.
56AD Minister’s tasks before designating a sector or declaring
Minister’s tasks before designating a sector or declaring actions etc.
7 Subsection 56AD(1)
8 Subparagraph 56AD(1)(a)(vi)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.11
9 Paragraph 56AD(1)(b)
Insert comma after 'information' or types of actions.
10 Paragraph 56AD(1)(c)
Insertion of phrase for an instrument under subsection 56AC(2)
11 Paragraph 56AD(1)(d)
Insertion of phrase before certain words
12 Subsections 56AD(2) and (3)
Insertion of section reference after subsection 56AC(2)
13 Section 56AE (heading)
56AE Secretary must arrange for analysis, consultation and report
Secretary must arrange for analysis, consultation and report about an instrument proposing to designate a sector or declare actions
Secretary must arrange for analysis, consultation and report
14 Subsection 56AE(1)
15 Subparagraph 56AE(1)(b)(ii)
16 Subparagraph 56AE(1)(c)(iii)
Substitute primary regulator for an instrument under subsection 56AC(2)
17 Section 56AEA (heading)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.12
18 Section 56AEA
19 Section 56AF (heading)
56AF Information Commissioner must analyse and report about an
Information Commissioner must analyse and report about an instrument proposing to designate a sector or declare actions
20 Section 56AH
21 Before subsection 56AI(1)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.13
22 Subsection 56AI(1)
23 Paragraph 56AI(1)(a)
Insertion of words in a specific paragraph
24 After paragraph 56AI(1)(a)
Authorisation for use of consumer data by accredited action initiators
25 Paragraph 56AI(1)(b)
Repeal paragraph and substitute with new provision
26 Subsection 56AI(1) (note 2)
27 Before subsection 56AI(2)
Meaning of directly or indirectly derived
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.14
28 Before subsection 56AI(3)
29 After subparagraph 56AI(3)(b)(ii)
30 Subparagraph 56AI(3)(b)(iii)
Substitute “, (ii) or (iia)” for “or (ii)”,
31 Paragraph 56AI(3)(d)
Substitute 'exclusions' for 'conditions'
32 After subsection 56AI(3)
A person is a CDR consumer for a CDR action if certain conditions are met.
33 Paragraph 56AJ(1)(d)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.15
34 Subsection 56AJ(2) (heading)
Repeal heading and substitute with new text
35 After paragraph 56AJ(3)(b)
Conditions must be met for consumer data rules.
36 After subsection 56AJ(3)
Disclosure of CDR data to a person is prohibited if they are not a core data holder.
Disclosing CDR data to a person is prohibited.
Neither the CDR data nor any other CDR data from which it was directly or indirectly derived was disclosed to the person.
The classes of data holders declared in the CDR declaration for that type of CDR action include the core data holders.
The designation instrument also specifies, as described in paragraph 56AC(2)(b), a class of persons (the core data holders) as holding a class of information to which the CDR data belongs.
The person is not a core data holder, but is a voluntary action service provider for a type of CDR action.
The person is not a core data holder, but is a voluntary action service provider for a type of CDR action; and
The designation instrument also specifies, as described in paragraph 56AC(2)(b), a class of persons (the core data holders) as holding a class of information to which the CDR data belongs; and
The person must not disclose CDR data if they are not a core data holder.
Neither the CDR data nor any other CDR data from which it was directly or indirectly derived was disclosed to the person under the consumer data rules; and
37 Subsection 56AJ(4) (heading)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.16
38 At the end of section 56AJ
Person specified in designation instrument and meets conditions must comply with CDR data rules.
Person specified in designation instrument and meets conditions
Class of information to which the CDR data belongs
Designation instrument specifies class of persons holding such information
Conditions specified in consumer data rules are met
Person meets conditions specified in consumer data rules
39 Section 56AK
40 Paragraph 56AK(c)
Repeal paragraph and substitute with new provision regarding CDR data disclosure.
41 After paragraph 56AK(d)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.17
CDR data is not being held by (or on behalf of) the person as an action service provider for a type of CDR action.
Restricts holding CDR data to specific time periods
The first-mentioned CDR data is not being held by (or on behalf of) the person as an action service provider for a type of CDR action.
42 At the end of section 56AK
Authorisation required for using CDR data
The person is authorised by the consumer data rules
Authorisation is valid during the preparation or giving of an instruction
The person is authorised by the consumer data rules to use or disclose that information to prepare or give a valid instruction for the performance of the CDR action on behalf of the CDR consumer
The authorisation is valid during the relevant time period
Paragraph 56BGA(1)(d) ensures the rules can give the authorisation referred to in paragraph (b) of this subsection
The rules have the authority to authorise
The rules have the authority to disclose information
43 After section 56AM
43(1) After section 56AM
Person must be within a class of data holders or voluntary action service provider for CDR action. A CDR action is an action of a type declared under section 56ACA.
Class of data holders declared in CDR declaration
(1) A CDR action is an action of a type declared under section 56ACA.
The action occurs during the declaration period
The action ends before the declaration period
The declaration is propagated to the action
The declaration is used in AI processing
43(2) After section 56AM
Declaration of CDR action type under section 56ACA.
44 Subsection 56BA(1)
Insertion of additional terms in CDR actions
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.19
45 At the end of subsection 56BA(2)
Add different rules for different types of CDR actions
46 After paragraph 56BB(c)
47 Paragraph 56BB(d)
Substitute accreditation phrase in Part 56BB(d)
48 After paragraph 56BB(d)
Approving persons for voluntary action service providers
49 At the end of paragraph 56BC(1)(a)
Granting permission for data holder of other CDR data
Data holder of other CDR data is allowed
50 Subsection 56BD(1) (heading)
51 Paragraph 56BD(1)(a)
Repeal paragraph and substitute with new obligation
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.20
Replace existing obligation with new one
52 After subparagraph 56BD(1)(b)(iv)
List of data holders and action service providers for CDR data
53 Subparagraph 56BD(1)(b)(v)
54 Subsection 56BD(1) (note 1)
Repeal note and substitute with new definition for CDR data disclosure
55 Subsection 56BD(3)
Cannot include rules affecting data holder that relate to deletion of CDR data unless disclosure under consumer data rules.
Prohibition on rules affecting data holder that relate to deletion of CDR data unless disclosure under consumer data rules.
56 After section 56BG
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.21
57 Section 56BH (heading)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.24
56BH Rules about accreditation for the purposes of this Part
58 After subparagraph 56BH(1)(d)(ii)
59 After paragraph 56BH(1)(d)
Rules for a person accredited at a particular level
60 Before the note to subsection 56BH(1)
Inserts a note about accreditation for initiating CDR actions under consumer data rules.
61 Subsection 56BH(1) (note)
62 Subsection 56BH(3)
Repeal subsection, substitute new grounds for varying accreditation
Prohibits failing to comply with requirements
Repeal subsection, substitute new grounds
63 Subsection 56BH(4)
Must permit applications for review of decisions made under consumer data rules
64 After section 56BH
Rules for approving persons to be voluntary action service providers for types of CDR actions
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.25
65 After paragraph 56BI(1)(c)
Consumer has power to direct action initiator for CDR actions of that type.
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.27
Consumer has power to direct action initiator.
to give the consumer, or an accredited person, reports about...
...for the giving of a valid instruction for the performance of...
66 Paragraph 56BI(1)(d)
Insertion of additional term in CDR data participants
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.28
67 Subsection 56BI(2)
68 Subsection 56BI(2)
Omit 'or accredited persons,' and substitute 'CDR action participants or accredited persons'.
69 Subparagraph 56BJ(f)(i)
70 Paragraph 56BJ(g)
71 After subparagraph 56BJ(ia)(iii)
Insert an action service provider for a type of CDR action
72 After paragraph 56BK(2)(d)
Insert amendments to Schedule 1 and changes to the power to make consumer data rules
73 Subsection 56BK(3)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.29
74 Subsection 56BK(4)
75 After paragraph 56BP(a)
Consider certain matters when making a rule about fees for CDR actions
76 Paragraph 56BQ(a)
Substitute provisions in section 56AD(1)(a) and (b) with provisions in section 56BP(a) and (aa)
77 Section 56BR
78 After subparagraph 56BN(1)(c)(ii)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.30
79 Subsection 56BN(1) (note)
Substitute specific words in a provision.
80 After paragraph 56BO(1)(b)
81 Subsection 56BO(1) (note 1)
Omit ‘or (b)’, substitute ‘, (b), (c) or (d’.
82 Subparagraphs 56BU(2)(a)(i) and (ii)
83 Section 56BV
Repeal section and substitute with new amendments.
56BV Commission may intervene if fee for disclosing or using
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.31
56BV(1) Commission may intervene if fee for disclosing or using
Commission may determine fee for disclosing or using CDR data
Defines fee for disclosing or using CDR data
56BV(2) Commission may intervene if fee for disclosing or using
84 Sections 56BW to 56BY
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.32
85 At the end of Division 2 of Part IVD
Accredited persons must act efficiently, honestly and fairly when initiating CDR actions.
Classifies accredited persons as those who must act efficiently, honestly and fairly
86 Sections 56CC and 56CD
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.40
87 Application of repeals
Repeal of sections 56CC and 56CD applies after commencement
88 Section 56EA
Privacy safeguards apply to accredited persons and data holders/designated gateways.
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.41
Circumstances in which these safeguards can apply include where the person is an accredited action initiator for a type of CDR action.
89 Paragraphs 56EC(4)(aa), (b) and (c)
Repeal of Australian Privacy Principles for accredited persons in relation to CDR data
Prohibition of Australian Privacy Principles
90 After paragraph 56EC(4)(d)
Privacy Act 1988 applies to small business operators providing CDRActions.
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.42
Imposes duty on small business operators.
Defines scope of Privacy Act 1988 application.
91 After paragraph 56EC(5)(b)
Insert: or (c) a person as an action service provider, for a type of CDR action, in relation to CDR data.
92 Subsection 56EC(5) (note 1)
Omit 'or designated gateway', insert 'designated gateway or action service provider'
93 Subsection 56ED(1)
Ensure open and transparent management of CDR data
Subclass of obligations related to data management
94 Paragraph 56ED(3)(c)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.43
95 After subsection 56ED(6)
CDR entity must provide information to consumers about access and complaint procedures.
Contains part of the consumer data rules.
96 Sections 56EF and 56EG
Repeal sections and substitute with new provisions.
56EF Privacy safeguard 3—soliciting CDR data from participants
No one can collect CDR data from another person unless specified in Schedule 1 Amendments
56EG Privacy safeguard 4—dealing with unsolicited CDR data from
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.45
56EG(1) Privacy safeguard 4—dealing with unsolicited CDR data from
Destroy CDR data as soon as practicable after collecting it if certain conditions are met.
The collector collected the CDR data while covered by column 1 of an item of the following table, and from a person covered by column 2 of that item
Temporal interval for destruction of CDR data
Destroy CDR data as soon as practicable after collecting it
56EG(2) Privacy safeguard 4—dealing with unsolicited CDR data from
Subsection (1) applies to all collection of data from the person mentioned in column 2 of the table.
State holds an obligation to protect data.
97 Section 56EH (before the note)
98 Section 56EH (note)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.46
99 Before subsection 56EM(1)
100 Before subsection 56EM(2)
Disclosures by accredited data recipients
101 Before subsection 56EM(3)
102 At the end of section 56EM
Must disclose CDR data to notified consumers
103 Subsections 56EN(3) and (4)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.47
103(2A) Subsections 56EN(3) and (4)
Ensure CDR data is accurate, up to date and complete.
CDR data has a value (accuracy, completeness)
(2A) If a person as an action service provider for a type of CDR action is required or authorised under the consumer data rules to disclose CDR data...
...the action service provider must take reasonable steps to ensure that the CDR data is, having regard to the purpose for which it is held, accurate, up to date and complete.
103(3) Subsections 56EN(3) and (4)
Must advise CDR consumer of incorrect data after becoming aware.
103(4) Subsections 56EN(3) and (4)
Correct and disclose corrected CDR data to recipient upon request or by law.
Obligation to correct and disclose CDR data.
104 Subsection 56EN(5) (note)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.48
105 Subsection 56EP(1)
Data holder must correct CDR data upon request from consumer
Classifies data holder as entity with obligation to correct CDR data
106 Paragraph 56EP(2)(b)
Exclusion of certain data from response to accredited recipient
Prohibition on disclosure of certain data
and is not given in response to advice from the accredited data recipient under subsection 56EN(3)
107 Subsection 56EP(2)
Insertion of phrase after subsection (3)
108 Subsection 56EP(2) (note)
109 At the end of subsection 56EP(2)
Subsection 56EN(4) applies instead of this subsection if the request is given in response to advice from the accredited data recipient under subsection 56EN(3).
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.49
110 After subsection 56ER(1A)
The Information Commissioner may assess an action service provider's compliance with privacy safeguards and consumer data rules.
Obligation to comply with privacy safeguards and consumer data rules.
The Information Commissioner may assess an action service provider's compliance.
An action service provider must comply with the privacy safeguards and consumer data rules.
The action service provider is maintaining CDR data in accordance with the privacy safeguards.
An action service provider must maintain CDR data in accordance with the privacy safeguards.
The action service provider is handling CDR data in accordance with the consumer data rules.
An action service provider must handle CDR data in accordance with the consumer data rules.
The assessment is made during the time the action service provider has been or may be disclosed CDR data.
An assessment of an action service provider's compliance must be made during the time the action service provider has been or may be disclosed CDR data.
The Information Commissioner may diffuse information about an action service provider's compliance with privacy safeguards and consumer data rules.
An assessment of an action service provider's compliance must be made public.
111 Subsections 56ER(2) and (3)
Omit “or (1A)”, substitute “, (1A) or (1B)”.
112 Subsection 56ES(2) (table, heading to column headed
113 At the end of section 56ES
114 Paragraph 56ET(3)(a)
Omit “or accredited person”, substitute ‘, accredited person or action service provider for a type of CDR action’.
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.50
115 After paragraph 56ET(4)(c)
Disclosure of CDR data under consumer data rules for action service providers.
116 Subsection 56ET(4) (table, heading to column headed
117 Subsection 56ET(4) (at the end of the cell at table item 5,
Disclosure of CDR data under consumer data rules is required.
Subject: Disclosure of CDR data under consumer data rules
118 Subparagraph 56ET(5)(b)(iii)
Omit “respondent; and”, substitute “respondent; or”.
119 After subparagraph 56ET(5)(b)(iii)
Action service provider is respondent in case of complaint about CDR data disclosure
Consumer has been or may be disclosed CDR data
Action service provider is the respondent
Action service provider is the respondent in case of complaint
Consumer has been or may be disclosed CDR data under consumer data rules
Action service provider is respondent during complaint period
Action service provider is the respondent during the complaint period
Action service provider must be respondent in case of complaint
Action service provider must be the respondent
120 At the end of paragraph 56ET(5)(d)
Disclose CDR data under consumer data rules if breach of privacy safeguard
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.51
Action service provider has been or may be disclosed CDR data
121 At the end of section 56ET
Disregard reference to individual in section 39 of the Privacy Act 1988 for purposes of item 3 of the table in subsection (4)
122 Paragraph 56EU(1)(i)
Omit “or (2)”, substitute “, (2) or (4)”.
Prohibits omitting “or (2)”, requiring substitution.
123 Paragraph 56EU(1)(j)
124 Subsection 4(1)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.52
125 Subsection 4(1) (definition of Data Recipient Accreditor)
Repeal the definition of Data Recipient Accreditor
126 Paragraph 56BH(1)(a)
Substitute CDR Accreditor for Data Recipient Accreditor
127 Subparagraph 56BI(1)(h)(i)
Omit 'Data Recipient Accreditor', substitute 'CDR Accreditor'.
128 Subsection 56CA(1)
Replace 'Data Recipient Accreditor' with 'CDR Accreditor'
129 Section 56CB
Substitute CDR Accreditor for Data Recipient Accreditor.
130 Subdivision C of Division 3 of Part IVD (heading)
Repeal heading and substitute with new title
131 Section 56CG (heading)
132 Subsection 56CG(1)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.53
133 Section 56CG (note 2)
134 Section 56CG (note 2)
Omit 'of Data Recipient Accreditor', substitute 'of CDR Accreditor'.
135 Transitional—current Data Recipient Accreditor
Continues existing appointment of CDR Accreditor under amended subsection 56CG(1) of the Competition and Consumer Act 2010.
Temporal interval on which the appointment continues
136 Subsections 56CH(1) and (2)
137 Subsection 56CH(2)
Substitution of terms in subsection 56CH(2)
138 Subsection 56CH(3)
139 Paragraph 56CH(4)(a)
Substitute CDR Accreditor for Data Recipient Accreditor in Schedule 1
140 Subsection 56CH(4)
Replace 'Data Recipient Accreditor's' with 'CDR Accreditor's'
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.54
141 Subsections 56CI(1) and (3)
142 Subsection 56CJ(1)
143 Subsection 56CJ(1)
144 Subparagraph 56CJ(1)(b)(ii)
145 Subsection 56CJ(2)
146 Subsection 4(1)
Definitions for action service provider, CDR action, and CDR action participant.
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.55
147 Subsection 4(1) (definition of CDR consumer)
Insertion of new clause (3A) after existing clause (3)
148 Subsection 4(1)
Definitions for CDR declaration and voluntary action service provider.
149 Paragraph 56AC(2)(b)
150 Subsection 56AC(2) (note 2)
151 Subparagraph 56AD(1)(c)(i)
Insertion of phrase after 'Constitution)
152 After paragraph 56AN(c)
Inserts provisions from other instruments under this Part
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.56
153 Paragraph 56AN(d)
Omit “or (c)”, substitute “, (c) or (ca)”.
154 Subsection 56AO(1)
155 After subsection 56AO(3)
155(3A) After subsection 56AO(3)
CDR provisions apply to all persons, including foreign persons.
CDR provisions have effect in relation to a CDR action
155(3B) After subsection 56AO(3)
CDR provisions apply to acts or omissions by Australian persons or occurring wholly or partly in Australia.
The CDR provisions have effect in relation to an act, or omission, relating to a CDR action.
The CDR provisions only apply if the act or omission occurs wholly or partly in Australia.
To the extent that the CDR provisions have effect in relation to an act, or omission, relating to a CDR action.
156 Subsection 56AO(4)
Insertion of clause (3B) after clause (3)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.57
157 Subsection 56AO(5)
158 Subsections 56AR(2) and (3)
158(2) Subsections 56AR(2) and (3)
Entity must be declared as participating entity for specified capacities.
158(3) Subsections 56AR(2) and (3)
Applicability of CDR provisions to entities
(a) the CDR provisions relate to a CDR consumer for CDR data, and the entity is a CDR consumer for CDR data (or would be if the entity were a person);
159 After paragraph 56AR(5)(a)
Confers functions necessary for entity to operate as accredited person
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.58
160 At the end of subsection 56AR(5)
Confer functions necessary for entity to operate as action service provider
161 Subsection 56AS(1)
Declare entity as participating entity in specified capacities.
162 Subsections 56AS(2) and (3)
163 Transitional—existing declarations of participating
Existing declarations of participating entities continue in force.
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.59
164 Subsection 56AU(3) (at the end of the definition of CDR
Add an action service provider for a type of CDR action.
165 Subsection 56BAA(1)
Delete CDR data if a valid request is made
Prohibits deleting CDR data in response to a valid request
166 Subsection 56BAA(2)
167 Subparagraph 56BD(1)(b)(v)
168 Paragraph 56DA(1)(a)
Insertion of 'or types of CDR actions' after 'designated sectors'
169 After subparagraph 56DA(1)(b)(iii)
Insert CDR action participants and consumers
Requires relation between identifiable temporal intervals
170 Subparagraph 56DA(1)(b)(iv)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.60
171 After paragraph 56FA(1)(d)
Defines valid instruction format and description for CDR action
172 After paragraph 56FB(1)(b)
Insert different provisions for different types of CDR actions
173 After paragraph 56FB(1)(c)
Insert different provisions for different classes of action service providers
174 Paragraph 56FB(2)(b)
Repeal paragraph and substitute with new text
175 After subsection 56FD(2)
Defines contract force between action service provider and accredited initiators under a binding data standard.
176 Section 56GAA (heading)
Insertion of phrase after 'Delegation by'
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.61
177 Before subsection 56GAA(1)
177(1A) Before subsection 56GAA(1)
Delegation of minister's functions or powers to SES employees
The Minister may delegate functions or powers in writing
The Minister can delegate functions or powers
177(1B) Before subsection 56GAA(1)
Delegation by the Secretary must comply with written directions of the Minister.
Delegate must perform delegated function or exercise delegated power
Comply with written directions of the Minister
Written directions are a temporal interval within which the delegate must comply
Written directions of the Minister are a temporal interval within which the delegate must comply
Compliance with written directions implies delegation by the Secretary
Complying with written directions of the Minister implies delegation by the Secretary
Written directions are a type of information that must be disseminated to the delegate
Written directions of the Minister are a type of information that must be disseminated to the delegate
Delegation by the Secretary is a type of artificial intelligence application
178 Section 56GAB
The CDR provisions do not exclude or limit the operation of other laws.
179 After paragraph 56GB(1)(a)
Inserts CDR declarations for types of CDR actions
180 Section 56GC (heading)
Repeal heading and substitute with Schedule 1 Amendments
56GC Complying with CDR requirements etc.: protection from
Protection from liability for complying with CDR requirements
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.62
Imposes a duty on the state to protect individuals from liability
181 Subsection 56GC(1)
No liability for actions taken in good faith and compliance with laws.
CDR entity is a data holder, accredited data recipient, or designated gateway.
182 Subsection 56GD(2)
Exempt from provisions covered by this section
183 Transitional—existing exemptions by Commission
Continuation of existing exemptions under subsection 56GD(2) of the Competition and Consumer Act 2010
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.63
184 Subsection 56GE(2)
Exempt particular persons or classes from specified provisions.
Classify exemptions as subclasses of regulations
Exemptions are a subclass of regulations
Exemptions are a subclass of regulations.
185 Transitional—existing exemptions and modifications by
Continuation of existing regulations under Competition and Consumer Act 2010
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.64
186 Section 56GF
Repeal section and substitute with new provision
56GF Application of the CDR provisions
56GF(1) Application of the CDR provisions
A person is subject to the CDR provisions if they act or omit to act in a way that affects a corporation's activities.
The CDR provisions apply to a person if...
...a way that affects, is capable of affecting or is taken with intent to affect the activities, functions, relationships or business of a corporation.
56GF(2) Application of the CDR provisions
The CDR provisions apply to certain persons acting or omitting to act in specific courses of conduct.
The provision applies to the specified persons.
56GF(3) Application of the CDR provisions
Gives effect to Australia's obligations under the ICCPR.
56GF(4) Application of the CDR provisions
Section 6 does not apply to persons who are not corporations in relation to the CDR provisions.
Excludes section 6 from non-corporate persons
(4) Section 6 (about the application of this Act to persons who are not corporations)
does not apply in relation to the CDR provisions.
Temporal overlap between section 6 and CDR provisions
Section 6 does not apply in relation to the CDR provisions.
Diffuses section 6 exclusion to non-corporate persons
Infers exclusion from non-corporate persons under section 6
Validates exclusion from non-corporate persons under section 6
56GF(5) Application of the CDR provisions
ICCPR is defined as the International Covenant on Civil and Political Rights
187 Subsection 75B(1)
Substitute certain sections with new ones.
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.66
188 Subparagraph 76(1)(a)(ib)
Substitute specific sections and subsections.
189 Subsection 76(1A) (table item 9)
190 Subsections 76B(2), (3) and (4)
191 Paragraph 76B(5)(a)
192 Subparagraphs 79A(1)(a)(i) and 79B(a)(ii)
193 Subparagraph 80(1)(a)(iib)
Prohibits omission of specified sections.
194 Paragraphs 80(9)(a) and (b)
Omit section 56CC(1) and substitute with 56BZI(1)
195 Paragraph 82(1)(c)
196 Subparagraph 83(1)(a)(ii)
Substitute section 56BZI(1) for section 56CC(1)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.67
197 Subparagraph 83(1)(b)(iii)
198 Paragraph 84(1)(a)
199 Paragraph 84(1)(b)
Prohibits omission of specified sections
200 Paragraph 84(3)(a)
201 Paragraph 84(3)(b)
202 Subsection 86(1A)
203 Subsection 86(2)
204 Paragraph 86A(1)(b)
Substitute specific sections and subsections in Schedule 1
Imposes a duty on the legislative body to make the substitution
205 Subsection 86C(4) (paragraph (a) of the definition of
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.68
Prohibits omission of specified sections or subsections
206 Paragraph 86D(1)(b)
207 Subsection 86D(1A)
208 Paragraph 86E(1)(a)
209 Paragraph 86E(1A)(a)
210 Subsection 87(1)
211 Subsection 87(1)
212 Paragraphs 87(1A)(a), (b) and (baa)
213 Paragraph 87(1A)(ba)
214 Subsection 87(1C)
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.69
215 After paragraph 157AA(3)(a)
Inserts an agency with foreign supervision or regulation function
216 Paragraph 163(2)(a)
217 Subsection 163A(4B)
218 Paragraph 163A(4C)(a)
219 Subsection 163A(4D)
220 Before subparagraph 56ES(4)(a)(i)
Inserts the last reference in section 26WA
treasury-laws-amendment-consumer-data-right-act-2024.pdf, p.70
221 Subparagraph 56ES(4)(a)(ii)
222 At the end of paragraph 56ES(4)(a)
Add references from Division 4 of Part IIIC