We will exercise our compliance and enforcement powers with integrity, professionalism and in the public interest. This approach recognises the joint regulatory model and that breaches of the legislation (including the Privacy Safeguards, Rules and Data Standards) will be dealt with efficiently and effectively. We will adopt a strategic risk-based approach to compliance and enforcement. We will continue to engage with CDR participants going forward. For more information, CDR participants should read the Data Standards, including the CX Standards and associated guidelines, as well as the Privacy Safeguard Guidelines. While it is the responsibility of each CDR participant to be fully aware of its obligations under the CDR regulatory framework, the ACCC has had considerable engagement with data holders and prospective data recipients regarding these obligations.įurther, the Data Standards Body ( DSB) and the OAIC have published guidelines to assist CDR participants to understand the nature of their obligations under the CDR framework. The CDR is a significant economy wide reform and we recognise that there may be a period of transition for CDR participants to ensure their systems and processes fully meet their obligations under the CDR regulatory framework. This is particularly important as the CDR is rolled out more broadly. Consumers should be able to trust that we are monitoring and enforcing CDR participants’ compliance with the relevant laws, Rules and Data Standards. Consumers must be confident that the CDR regime works as intended and that the regulatory framework put in place will protect their interests. Our approach to compliance and enforcement will be underpinned by the objective of ensuring that consumers can trust the security and integrity of the CDR regime. Monitoring compliance and enforcement of the CDR regulatory obligations will be jointly conducted by the ACCC and the OAIC. We will regularly review and update this policy to ensure it reflects our current approach to compliance and enforcement. This policy does not discuss how the OAIC will apply its complaint handling powers or the process for making a CDR consumer complaint. This policy aims to help consumers and CDR participants understand the approach that the Australian Competition and Consumer Commission ( ACCC) and the Office of the Australian Information Commissioner ( OAIC) will adopt to encourage compliance and prevent breaches of the CDR regulatory framework.
Allowing consumers to share their data with service providers of their choice will lead to increased competition and will drive innovation across the Australian economy.
Consumer consent and strong privacy protections will be central to the CDR regime. The CDR will give consumers more control over their data. The CDR also requires businesses to provide public access to information on specified products that they offer. The objective of the CDR is to provide consumers with the ability to efficiently and conveniently access their personal data held by businesses ( data holders), and to authorise the secure sharing of that data to trusted and accredited third parties ( accredited data recipients). The Consumer Data Right ( CDR) is a data portability reform that will be rolled out economy‑wide, sector-by-sector, starting with banking. The policy is intended to help consumers and CDR participants understand the approach that the OAIC and ACCC will take to encourage compliance with CDR Rules, legislation (including Privacy Safeguards and Consumer Data Standards ), and how we will respond to breaches of the regulatory framework.ĪCCC/OAIC Compliance and Enforcement Policy for the Consumer Data Right Version control Date The Office of the Australian Information Commissioner (OAIC) and the Australian Competition and Consumer Commission (ACCC) have published a joint Compliance and Enforcement Policy for the Consumer Data Right.
0 kommentar(er)
