1CO.02.12
12
(1) When asking a CDR consumer to give a consent, an accredited person must: (b) allow the CDR consumer to choose the period of the collection consent, use consent, or disclosure consent (as appropriate) by enabling the CDR consumer to actively select or otherwise clearly indicate whether the consent would apply: (i) on a single occasion; or (ii) over a specified period of time; Note 2: For paragraph (b), the specified period may not be more than 12 months (or 7 years for certain consents by a CDR business consumer): see subrule 4.12(1). After the end of the period, redundant data would need to be dealt with in accordance with subsection 56EO(2) of the Act (privacy safeguard 12) and rules 7.12 and 7.13.
CDR Rule 4.11(1)(b), (Note 2) | CX Research 4, 5
Consent: Collection and use consents
12 August 2020 or earlier
1 May 2024