1CO2.01.12
12
(3) When asking a CDR consumer to give consent, the accredited person must give the CDR consumer the following information: (c) in the case of a collection consent or a use consent―how the collection or use (as applicable) indicated in accordance with subrule (1) complies with the data minimisation principle, including how: (i) in the case of a collection consent―that collection is reasonably needed, and relates to no longer a time period than is reasonably needed; and (ii) in the case of a use consent―that use would not go beyond what is reasonably needed; in order to provide the requested goods or services to the CDR consumer or make the other uses consented to;
CDR Rule 4.11(3)(c) | OAIC Chapter C: Consent (Data minimisation principle) | CX Research 1, 3
Consent: Amending consents
1 July 2021