Treasury Laws Amendment (Consumer Data Right) Act 2024 (Cth)

Treasury Laws Amendment (Consumer Data Right) Act 2024 No. 75, 2024 An Act to amend the Competition and Consumer Act 2010, and for related purposes Contents 1 Short title 2 Commencement 3 Schedules Schedule 1—Amendments Part 1—Introductory provisions Competition and Consumer Act 2010 Part 2—Declaring types of actions that can be initiated under the consumer data rules Competition and Consumer Act 2010 Part 3—Meanings of key terms Competition and Consumer Act 2010 Part 4—Changes to the power to make consumer data rules Competition and Consumer Act 2010 Part 5—Complying with the consumer data rules etc. Competition and Consumer Act 2010 Part 6—Changes to the Privacy safeguards Competition and Consumer Act 2010 Part 7—CDR Accreditor Competition and Consumer Act 2010 Part 8—Miscellaneous amendments Competition and Consumer Act 2010 Part 9—Contingent amendments Competition and Consumer Act 2010 Treasury Laws Amendment (Consumer Data Right) Act 2024 No. 75, 2024 An Act to amend the Competition and Consumer Act 2010, and for related purposes [Assented to 26 August 2024] The Parliament of Australia enacts: 1 Short title This Act is the Treasury Laws Amendment (Consumer Data Right) Act 2024. 2 Commencement (1) Each provision of this Act specified in column 1 of the table commences, or is taken to have commenced, in accordance with column 2 of the table. Any other statement in column 2 has effect according to its terms. Commencement information Column 1 Column 2 Column 3 Provisions Commencement Date/Details 1. Sections 1 to 3 and anything in this Act not elsewhere covered by this table The day this Act receives the Royal Assent. 26 August 2024 2. Schedule 1, Parts 1 to 8 The day after this Act receives the Royal Assent. 27 August 2024 3. Schedule 1, Part 9 The later of: 27 August 2024 (a) immediately after the commencement of the provisions covered by table item 2; and (paragraph (a) applies) (b) the commencement of the Privacy Legislation Amendment (Enforcement and Other Measures) Act 2022. However, the provisions do not commence at all if the event mentioned in paragraph (b) does not occur. Note: This table relates only to the provisions of this Act as originally enacted. It will not be amended to deal with any later amendments of this Act. (2) Any information in column 3 of the table is not part of this Act. Information may be inserted in this column, or information in it may be edited, in any published version of this Act. 3 Schedules Legislation that is specified in a Schedule to this Act is amended or repealed as set out in the applicable items in the Schedule concerned, and any other item in a Schedule to this Act has effect according to its terms. Schedule 1—Amendments Part 1—Introductory provisions Competition and Consumer Act 2010 1 After paragraph 56AA(b) Insert: (ba) to enable consumers in those sectors to request accredited persons to give instructions: (i) safely, efficiently and conveniently on behalf of the consumers; and (ii) to service providers in those sectors; for the performance of actions; and 2 Paragraph 56AA(c) Omit "and (b)", substitute "to (ba)". 3 Section 56AB Omit: (c) may require these kinds of disclosures, and other things, to be done in accordance with data standards. substitute: (c) enable consumers in those sectors to request accredited persons to give instructions on behalf of the consumers to service providers in those sectors for the performance of actions; and (d) require these kinds of disclosures and other things to be done, and these kinds of instructions to be given, in accordance with data standards. This Part regulates the instruction layer associated with instructions for the performance of actions, which includes regulating requests for instructions, the giving of instructions, and how service providers process instructions. A service provider given an instruction under the rules to perform an action must do so if the provider ordinarily performs actions of that type in the course of its business. Otherwise, this Part contains little regulation of the action layer (that is, regulating how service providers perform actions they are instructed to do). For example, the provider can perform the action, and charge any fees, in the way it ordinarily does. Part 2—Declaring types of actions that can be initiated under the consumer data rules Competition and Consumer Act 2010 4 Subdivision B of Division 1 of Part IVD (heading) Repeal the heading, substitute: Subdivision B—Designating sectors, and declaring actions, to which the consumer data right applies 5 After section 56AC Insert: 56ACA Declared types of actions that can be initiated under the consumer data rules The Minister may, by legislative instrument, declare: (a) one or more types of actions for which an instruction may be given under the consumer data rules; and (b) for each of those action types—the classes of data holders, of CDR data, that are to be action service providers for that type of action. Note: The classes of data holders specified for an action type will have no choice about being action service providers for that action type. 6 Section 56AD (heading) Repeal the heading, substitute: 56AD Minister's tasks before designating a sector or declaring actions etc. 7 Subsection 56AD(1) After "subsection 56AC(2)", insert "or section 56ACA". 8 Subparagraph 56AD(1)(a)(vi) After "information", insert ", or relating to the types of actions,". 9 Paragraph 56AD(1)(b) After "information", insert ", or types of actions,". 10 Paragraph 56AD(1)(c) Before "the following matters", insert "for an instrument under subsection 56AC(2)—". 11 Paragraph 56AD(1)(d) Before "whether", insert "for an instrument under subsection 56AC(2)—". 12 Subsections 56AD(2) and (3) After "subsection 56AC(2)", insert "or section 56ACA". 13 Section 56AE (heading) Repeal the heading, substitute: 56AE Secretary must arrange for analysis, consultation and report about an instrument proposing to designate a sector or declare actions 14 Subsection 56AE(1) After "subsection 56AC(2)", insert "or section 56ACA". 15 Subparagraph 56AE(1)(b)(ii) Omit "includes", substitute "include". 16 Subparagraph 56AE(1)(c)(iii) Repeal the subparagraph, substitute: (iii) for an instrument under subsection 56AC(2)—the person or body (if any) that the Secretary believes to be the primary regulator of the sector that the instrument would designate; (iiia) for an instrument under section 56ACA—a person or body (if any) that the Secretary believes to be a regulator of a type of actions that the instrument would declare; 17 Section 56AEA (heading) Repeal the heading, substitute: 56AEA Commission must analyse an instrument proposing to designate a sector or declare actions 18 Section 56AEA Omit "56AD(1)(a) to (e)", substitute "56AD(1)(a) to (d)". 19 Section 56AF (heading) Repeal the heading, substitute: 56AF Information Commissioner must analyse and report about an instrument proposing to designate a sector or declare actions 20 Section 56AH After "subsection 56AC(2)", insert "or section 56ACA". Part 3—Meanings of key terms Competition and Consumer Act 2010 21 Before subsection 56AI(1) Insert: Meaning of CDR data 22 Subsection 56AI(1) Omit "information that". 23 Paragraph 56AI(1)(a) Before "is within", insert "information that". 24 After paragraph 56AI(1)(a) Insert: (aa) information that: (i) relates to a CDR consumer for a CDR action; and (ii) an accredited action initiator for CDR actions of that type is authorised by the consumer data rules to use, or disclose, to prepare or give a valid instruction for the performance of the CDR action on behalf of the CDR consumer; or 25 Paragraph 56AI(1)(b) Repeal the paragraph, substitute: (b) information that is not covered by paragraph (a) or (aa) of this subsection, but is wholly or partly derived from information covered by: (i) paragraph (a) or (aa) of this subsection; or (ii) a previous application of this paragraph. 26 Subsection 56AI(1) (note 2) After "paragraph (a)", insert "or (aa)". 27 Before subsection 56AI(2) Insert: Meaning of directly or indirectly derived 28 Before subsection 56AI(3) Insert: Meaning of CDR consumer for CDR data 29 After subparagraph 56AI(3)(b)(ii) Insert: (iia) is holding the CDR data as an action service provider for a type of CDR action; or 30 Subparagraph 56AI(3)(b)(iii) Omit "or (ii)", substitute ", (ii) or (iia)". 31 Paragraph 56AI(3)(d) Omit "conditions", substitute "exclusions". 32 After subsection 56AI(3) Insert: Meaning of CDR consumer for a CDR action (3A) A person is a CDR consumer for a CDR action if: (a) the performance of the CDR action: (i) is for the person; or (ii) relates to the person because of circumstances of a kind prescribed by the regulations; and (b) the performance of the CDR action is not for the person as: (i) an accredited action initiator for CDR actions of that type; or (ii) an action service provider for CDR actions of that type; and (c) none of the exclusions (if any) prescribed by the regulations apply to the person in relation to the CDR action. Example: Assume X and Y are both accredited action initiators, and Y gives a valid instruction for the performance of a CDR action (that relates to the supply of accounting services) on X's behalf. X will be a CDR consumer for the CDR action, but Y will not be because of paragraph (b). Other definitions of consumer do not apply for this Part 33 Paragraph 56AJ(1)(d) Omit "or (4)", substitute ", (3A), (4) or (5)". 34 Subsection 56AJ(2) (heading) Repeal the heading, substitute: First case—person is specified in the designation instrument and data not disclosed to the person under the consumer data rules 35 After paragraph 56AJ(3)(b) Insert: ; and (c) the conditions (if any) specified in the consumer data rules are met. 36 After subsection 56AJ(3) Insert: Third case—reciprocity arising from the person being a voluntary action service provider for a type of CDR action (3A) This subsection applies to a person and CDR data if: (a) neither the CDR data, nor any other CDR data from which it was directly or indirectly derived, was disclosed to the person under the consumer data rules; and (b) the designation instrument (see subsection (1)) also specifies, as described in paragraph 56AC(2)(b), a class of persons (the core data holders) as holding a class of information to which the CDR data belongs; and (c) the person is not a core data holder, but is a voluntary action service provider for a type of CDR action; and (d) the classes of data holders declared in the CDR declaration for that type of CDR action include the core data holders; and (e) the conditions (if any) specified in the consumer data rules are met. Note 1: The CDR data needs to be held by (or on behalf of) the person (see paragraph (1)(b)). Note 2: The core data holders are data holders because of subsection (2). 37 Subsection 56AJ(4) (heading) Repeal the heading, substitute: Fourth case—person is an accredited person and conditions in the consumer data rules are met 38 At the end of section 56AJ Add: Fifth case—person is specified in the designation instrument and conditions in the consumer data rules are met (5) This subsection applies to a person and CDR data if: (a) the person, or a class of persons to which the person belongs, is specified, as described in paragraph 56AC(2)(b), in the designation instrument as holding a class of information to which the CDR data belongs; and (b) the CDR data, or any other CDR data from which it was directly or indirectly derived, was disclosed to the person under the consumer data rules; and (c) the conditions specified in the consumer data rules are met. 39 Section 56AK Before "A person", insert "(1)". 40 Paragraph 56AK(c) Repeal the paragraph, substitute: (c) the CDR data, or any other CDR data from which it was directly or indirectly derived, either: (i) was disclosed to the person under the consumer data rules; or (ii) is covered by subsection (2) for the person; and 41 After paragraph 56AK(d) Insert: ; and (e) the first‑mentioned CDR data is not being held by (or on behalf of) the person as an action service provider for a type of CDR action. 42 At the end of section 56AK Add: (2) This subsection covers CDR data for a person if: (a) the CDR data is information that relates to a CDR consumer for a CDR action; and (b) the person is authorised by the consumer data rules to use or disclose that information to prepare or give a valid instruction for the performance of the CDR action on behalf of the CDR consumer. Note: This CDR data is information that is CDR data because of paragraph 56AI(1)(aa). Paragraph 56BGA(1)(d) ensures the rules can give the authorisation referred to in paragraph (b) of this subsection. 43 After section 56AM Insert: 56AMA Meanings of CDR action and CDR declaration (1) A CDR action is an action of a type declared under section 56ACA. (2) A CDR declaration, for a type of CDR action, is the declaration under section 56ACA that declares actions of that type. 56AMB Meanings of action service provider and voluntary action service provider (1) A person is an action service provider, for a type of CDR action, if the person: (a) is within a class of data holders (of CDR data) declared in the CDR declaration for that type of CDR action; or (b) is a voluntary action service provider for that type of CDR action. Note 1: A data holder covered by paragraph (a) has no choice about being an action service provider for CDR actions of that type. Note 2: A data holder covered by paragraph (a) for one or more types of CDR actions will not be an action service provider for any other type of CDR action unless the data holder chooses to apply to be a voluntary action service provider. (2) A person is a voluntary action service provider, for a type of CDR action, if: (a) paragraph (1)(a) does not apply to the person for that type of CDR action; and (b) the person holds an approval, of the kind described in subsection 56BHA(1), under the consumer data rules for that type of CDR action. Note: The person will need to have applied to be approved as an action service provider for CDR actions of that type (see subsection 56BHA(1)). 56AMC Meaning of accredited action initiator A person is an accredited action initiator for a type of CDR action if: (a) the person is an accredited person; and (b) the person's accreditation authorises the person to initiate that type of CDR action. Note 1: The consumer data rules may include rules about accreditation, including about different levels of accreditation (see subsection 56BH(1)). Note 2: The Register of Accredited Persons may include information about what a person's level of accreditation authorises the person to do (see section 56CE). 56AMD Meaning of CDR action participant A CDR action participant is an action service provider, or an accredited action initiator, for one or more types of CDR actions. Part 4—Changes to the power to make consumer data rules Competition and Consumer Act 2010 44 Subsection 56BA(1) After "designated sectors", insert ", or types of CDR actions,". 45 At the end of subsection 56BA(2) Add: ; or (e) different rules for different types of CDR actions; or (f) different rules for different classes of: (i) action service providers for types of CDR actions; or (ii) accredited persons; or (iii) CDR consumers for CDR actions. 46 After paragraph 56BB(c) Insert: (ca) initiating CDR actions (see also section 56BGA); 47 Paragraph 56BB(d) Omit "accreditation of data recipients", substitute "accreditation for the purposes of this Part". 48 After paragraph 56BB(d) Insert: (da) approving persons to be voluntary action service providers for types of CDR actions (see also section 56BHA); 49 At the end of paragraph 56BC(1)(a) Add: or (iii) a data holder of other CDR data; 50 Subsection 56BD(1) (heading) Omit "designated", substitute "certain". 51 Paragraph 56BD(1)(a) Repeal the paragraph, substitute: (a) the CDR data is covered by paragraph 56AI(1)(a) or (aa); and 52 After subparagraph 56BD(1)(b)(iv) Insert: (iva) a data holder of other CDR data; or (ivb) an action service provider for a type of CDR action; or 53 Subparagraph 56BD(1)(b)(v) Omit "subparagraph (ii), (iii) or (iv)", substitute "any of subparagraphs (ii) to (ivb)". 54 Subsection 56BD(1) (note 1) Repeal the note, substitute: Note 1: This means CDR data cannot be required to be disclosed if it is only CDR data because it is directly or indirectly derived from: (a) other CDR data within a class specified, as described in paragraph 56AC(2)(a), in an instrument designating a sector under subsection 56AC(2); or (b) other CDR data, about a CDR consumer for a CDR action, that an accredited action initiator is authorised to use to prepare or give a valid instruction for the performance of the CDR action. 55 Subsection 56BD(3) Repeal the subsection, substitute: Rules affecting data holders that relate to the use, accuracy, storage, security or deletion of CDR data (3) For a data holder of CDR data for which there are one or more CDR consumers, the consumer data rules: (a) can only include rules affecting the data holder that relate to the deletion of the CDR data if: (i) the CDR data; or (ii) any other CDR data from which it was directly or indirectly derived; was disclosed to the data holder under the consumer data rules; and (b) can only include rules affecting the data holder that relate to the use, accuracy, storage or security of the CDR data if such rules also relate to the disclosure of the CDR data under the consumer data rules. 56 After section 56BG Insert: 56BGA Rules about initiating CDR actions Instructions may be given to initiate types of CDR actions (1) Without limiting paragraph 56BB(ca), the consumer data rules may include the following rules: (a) requirements on an accredited action initiator for a type of CDR action relating to giving a valid instruction: (i) for the performance of a CDR action of that type; and (ii) to an action service provider for a CDR action of that type; and (iii) on behalf of a CDR consumer for the CDR action, and in response to that consumer's valid request; and (iv) after a series of specified kinds of interactions between that initiator, provider, consumer or other persons (whether involving all or any 2 of them); (b) rules about how an instruction must be prepared for it to be a valid instruction of the kind described in paragraph (a), what matters a valid instruction may cover, and when an instruction ceases to be a valid instruction; (c) rules about: (i) how a CDR consumer for a CDR action may make a valid request of the kind described in subparagraph (a)(iii); and (ii) what must be included in a request for it to be valid, what matters a valid request may cover, and when a request ceases to be a valid request; (d) for an accredited action initiator for a type of CDR action who is acting as described in paragraph (a) to give a valid instruction on behalf of a CDR consumer for a CDR action—rules authorising the initiator to use or disclose information relating to the consumer that: (i) is disclosed to the initiator; or (ii) is otherwise held by the initiator; to prepare or give the valid instruction; (e) requirements on an action service provider for a type of CDR action relating to how the provider processes a valid instruction of the kind described in paragraph (a); (f) rules relating to the interactions described in subparagraph (a)(iv); (g) rules relating to the privacy safeguards in relation to an instruction or request relating to a CDR action; (h) rules relating to information that is not CDR data, but that relates to a CDR action. Note 1: The requirements described in paragraph (a) could, for example, include a requirement that the instruction be prepared and given in accordance with the relevant data standards. Note 2: The rules may deal with similar or additional matters to those in the privacy safeguards. When doing so, the rules will need to be consistent with those safeguards (see subsections 56EC(1) and (2)). Allowing providers to charge fees at the instruction layer (2) Without limiting paragraph 56BB(ca), the consumer data rules may include rules declaring that action service providers for a type of CDR action may charge (or cause to be charged) fees for processing valid instructions of the kind described in paragraph (1)(a) for CDR actions of that type. Note 1: The action service providers will not be able to charge fees for processing valid instructions in the absence of such a declaration (see subsection 56BZD(1) and paragraph 56BZD(2)(a)). Note 2: This subsection has no effect on what fees the providers decide to charge at the action layer for performing the CDR actions. Authorised disclosures or use of related CDR data in accordance with valid consents (3) Without limiting paragraph 56BB(ca), the consumer data rules may include the following rules: (a) rules authorising a CDR action participant to disclose all or part of specified CDR data to a person in accordance with a valid consent of a CDR consumer for the CDR data; (b) rules authorising a person to use CDR data in accordance with a valid consent of a CDR consumer for the CDR data; (c) rules about: (i) how a CDR consumer for the CDR data may make a valid consent of the kind described in paragraph (a) or (b); and (ii) what must be included in a consent for it to be valid, what disclosures, uses or other matters a valid consent may cover, and when a consent ceases to be a valid consent. Rules must not apply at the action layer (4) Despite any other provision of this Division, the consumer data rules cannot include rules requiring an action service provider for a type of CDR action to perform (or not perform) a CDR action of that type in a particular way. Note 1: The consumer data rules focus on the instruction layer not the action layer. Note 2: The action service provider will need to ensure it does not discriminate against a valid instruction given under the consumer data rules (see sections 56BZC and 56BZD). Rules affecting CDR action participants that relate to the use, accuracy, storage, security or deletion of CDR data (5) For CDR data that: (a) is information referred to in paragraph (1)(d), or is directly or indirectly derived from other information referred to in that paragraph; and (b) is disclosed to a CDR action participant under the consumer data rules (whether the disclosure is directly or indirectly from the accredited action initiator referred to in that paragraph); the consumer data rules can include rules affecting that CDR action participant that relate to the use, disclosure, accuracy, storage, security or deletion of the CDR data. 57 Section 56BH (heading) Repeal the heading, substitute: 56BH Rules about accreditation for the purposes of this Part 58 After subparagraph 56BH(1)(d)(ii) Insert: (iia) specified types of CDR actions; or 59 After paragraph 56BH(1)(d) Insert: (da) rules specifying what a person accredited at a particular level is authorised to do (or not authorised to do); 60 Before the note to subsection 56BH(1) Insert: Note 1: The rules described in paragraph (d) could, for example, include a level of accreditation for initiating CDR actions under the consumer data rules. 61 Subsection 56BH(1) (note) Omit "Note", substitute "Note 2". 62 Subsection 56BH(3) Repeal the subsection, substitute: (3) Without limiting paragraph (1)(e), the grounds for varying, suspending or revoking an accreditation could include failing to comply with a requirement in this Part or in the consumer data rules. Note 1: The requirements in this Part include the privacy safeguards. Note 2: An example of a variation could be the imposition of a condition, or changing the level of an accreditation. 63 Subsection 56BH(4) Repeal the subsection, substitute: (4) If the consumer data rules include rules enabling decisions to be made: (a) to vary, suspend or revoke an accreditation; or (b) to refuse to make a decision described in paragraph (a); the rules must permit the making of applications to the Administrative Appeals Tribunal for review of those decisions. Note 1: The consumer data rules can also provide for internal review of these decisions, and internal and AAT review of other decisions (see section 56BJ). Note 2: The decisions could be decisions of the Minister or of another person (see paragraph 56BJ(c)). 64 After section 56BH Insert: 56BHA Rules about approving persons to be voluntary action service providers for types of CDR actions (1) Without limiting paragraph 56BB(da), the consumer data rules may include the following rules: (a) rules for the approval of persons who apply to be action service providers for one or more types of CDR actions; (b) the criteria for a person to be so approved; (c) rules providing that such approval may be granted subject to conditions, and that conditions may be imposed on such an approval after it has been granted; (d) rules providing that such approvals may be granted at different levels corresponding to different risks, including the risks associated with: (i) specified types of CDR actions; or (ii) specified classes of CDR data; or (iii) specified classes of applicants for such approvals; (e) rules specifying what a person approved at a particular level is authorised to do (or not authorised to do); (f) rules for the period, renewal, transfer, variation, suspension, revocation or surrender of such approvals; (g) notification requirements on persons whose such approvals have been granted, renewed, transferred, varied, suspended, revoked or surrendered; (h) rules about publishing details of such approvals, renewals, transfers, variations, suspensions, revocations or surrenders; (i) transitional rules for when such an approval is varied, is suspended or ends, including about the disclosure, collection, use, accuracy, storage, security or deletion of CDR data; (j) rules conferring functions or powers on the Minister for any of the matters described in this subsection. Note: The Minister may delegate the functions or powers referred to in paragraph (j) (see section 56GAA). (2) Without limiting paragraph (1)(b): (a) the criteria may differ for different classes of persons; and (b) the criteria may permit a person to be approved even if the person: (i) is not a body corporate established by or under a law of the Commonwealth, of a State or of a Territory; and (ii) is neither an Australian citizen, nor a permanent resident (within the meaning of the Australian Citizenship Act 2007); and (c) the criteria may include the payment of a fee. Any fee must not be such as to amount to taxation. (3) Any such approval is granted on the basis that no compensation is payable if the approval is varied, transferred, suspended, revoked or surrendered in any way. (4) Without limiting paragraph (1)(f), the grounds for varying, suspending or revoking such an approval could include failing to comply with a requirement in this Part or in the consumer data rules. Note 1: The requirements in this Part include the privacy safeguards. Note 2: An example of a variation could be the imposition of a condition, or changing the level of an approval. (5) If the consumer data rules include rules enabling decisions to be made: (a) to grant, vary, suspend or revoke such an approval; or (b) to refuse to make a decision described in paragraph (a); the rules must permit the making of applications to the Administrative Appeals Tribunal for review of those decisions. Note: The consumer data rules can also provide for internal review of these decisions, and internal and AAT review of other decisions (see section 56BJ). (6) Without limiting paragraph (1)(h), the rules may provide that: (a) a person able to make any of the kinds of decisions described in subsection (5) may supply to another person a copy or extract that: (i) is from a publication of details described in paragraph (1)(h), where those details are matters of fact; and (ii) is certified by the person to be a true copy or a true extract (as applicable); and (b) such a certified copy or extract (the certificate) is admissible in any proceedings as prima facie evidence of the original; and (c) the certificate must not be admitted in evidence in proceedings relating to a person unless: (i) the person; or (ii) a barrister or solicitor who is representing the person in the proceedings; has, at least 14 days before the certificate is sought to be so admitted, been given a copy of the certificate together with notice of the intention to produce the certificate as evidence in the proceedings. 65 After paragraph 56BI(1)(c) Insert: (ca) a power for a CDR consumer for a CDR action to direct an accredited action initiator for CDR actions of that type to give the consumer, or an accredited person, reports about: (i) the consumer's valid request made to the initiator, under rules like those described in subsection 56BGA(1), for the giving of a valid instruction for the performance of the CDR action; or (ii) a valid instruction given by the initiator, under rules like those described in subsection 56BGA(1), on behalf of the consumer and for the performance of the CDR action; (cb) a power for a CDR consumer for a CDR action to direct an action service provider for CDR actions of that type to give the consumer, or an accredited person, reports about the provider's processing of any valid instruction given to the provider: (i) on behalf of the consumer under rules like those described in subsection 56BGA(1); and (ii) for the performance of the CDR action; 66 Paragraph 56BI(1)(d) After "CDR participants for CDR data", insert ", or CDR action participants,". 67 Subsection 56BI(2) Omit "Without limiting paragraph 56BB(e)", substitute "Without limiting subsection (1)". 68 Subsection 56BI(2) Omit "or accredited persons,", substitute "CDR action participants or accredited persons". 69 Subparagraph 56BJ(f)(i) After "CDR participants for CDR data", insert ", or CDR action participants,". 70 Paragraph 56BJ(g) After "CDR data", insert ", or CDR action participants,". 71 After subparagraph 56BJ(ia)(iii) Insert: (iv) an action service provider for a type of CDR action; 72 After paragraph 56BK(2)(d) Insert: ; or (e) is an action service provider for a type of CDR action. 73 Subsection 56BK(3) Repeal the subsection. 74 Subsection 56BK(4) Omit "Subsections (1) and (3) apply", substitute "Subsection (1) applies". 75 After paragraph 56BP(a) Insert: (aa) consider the following kinds of matters in relation to making a rule described in subsection 56BGA(2) (about fees at the instruction layer) for a type of CDR action: (i) whether performers of actions of that type currently charge fees for processing instructions to perform such actions; (ii) whether the incentive to perform actions of that type would be reduced if fees could not be charged for processing such instructions; (iii) the marginal cost of processing such instructions in accordance with the consumer data rules; and 76 Paragraph 56BQ(a) Omit "56AD(1)(a) and (b)", substitute "56BP(a) and (aa)". 77 Section 56BR Omit "56AD(1)(a) and (b)", substitute "56BP(a) and (aa)". Part 5—Complying with the consumer data rules etc. Competition and Consumer Act 2010 78 After subparagraph 56BN(1)(c)(ii) Insert: ; or (iii) a person is a CDR consumer for a CDR action; or (iv) a person has satisfied any criteria under the consumer d