01. Amending data and duration

Checklist ref

1CO2.01.19

Area
1CO2. Amending Consent
Wireframe ref

19

Type
CDR Rule
Requirement level
MUST
Participant
Data Recipient
Statement

(1) When asking a CDR consumer to give a consent, an accredited person must: (b) in relation to the period of the collection consent, use consent, or disclosure consent (as appropriate)—either: (i) allow the CDR consumer to actively select or otherwise clearly indicate the period of consent; or (ii) seek the CDR consumer’s agreement to the period of consent (as presented to the CDR consumer) to which the consent will apply; where the period of consent is either: (iii) a single occasion; or (iv) a specified period of time; Note 2: For paragraph (b), the specified period may not be more than 12 months: see subrule 4.12(1). After the end of the period, redundant data would need to be dealt with in accordance with subsection 56EO(2) of the Act (privacy safeguard 12) and rules 7.12 and 7.13. 

Reference

CDR Rule 4.11(1)(b), (Note 2) | CX Research 4, 5

Example

Consent: Amending consents

Version introduced
1.11.0
Date introduced

1 July 2021

Date modified

5 March 2025

Status
Active