The Office of the Australian Information Commissioner (OAIC) has begun a consultation process with industry and the public on proposed guidelines for protecting the privacy of people making use of the new Consumer Data Right (CDR).
The CDR will allow consumers to access information about them held by businesses and redirect it to another business or data recipient securely.
Australian Information Commissioner and Privacy Commissioner, Angelene Falk said her Privacy Safeguard Guidelines aimed at assisting industry to understand their obligations under the CDR framework, ensuring that consumers could transfer their data with their consent, safely and securely.
“The OAIC will regulate and enforce the privacy aspects of the CDR scheme, which will give consumers, including individual and business consumers, greater ability to make use of data about themselves when comparing and switching between products and services,” Ms Falk said.
“The CDR is designed to be rolled out across the economy, beginning with the banking sector in February 2020.”
She said the OAIC was looking for business to engage with the draft guidelines, including small business, as they would be subject to privacy obligations when they were accredited.
“This may be a new experience for them, given many small businesses are not subject to the Privacy Act, and we want to provide guidance and practical tips to all CDR participants to help them to comply with the scheme’s privacy safeguards,” Ms Falk said.
The Consumer Data Right is to apply to the banking sector first, followed by the energy sector and telecommunications.
The OAIC consultation will take place via written submission, with the draft guidelines available on the Office’s website. Submissions close on 20 November.
The 180-page Privacy Safeguard Guidelines can be accessed at this PS News link.
