5CM5.01.13
13
CDR Rule 4A.14(3) requires data holders to: (a) provide for alternative notification schedules (including reducing the frequency of notifications or not receiving notifications), and (b) give each joint account holder a means of selecting such an alternative, and of changing an election. Alternative settings under rule 4A.14(3) only apply to the following notifications in rule 4A.14(1): 1. The requester has given, amended, or withdrawn an authorisation 2. Expiration of an authorisation 3. A relevant account holder hasn’t given approval within the relevant time frame 4. A relevant account holder has withdrawn an approval The standards in this section provide a non-exhaustive list of options that data holders may implement to support their compliance with these rules. The specific implementation of an alternative notification schedule and offering, which may or may not include options listed here, are at the data holder’s discretion. It is the data holder’s responsibility to ensure it is meeting its obligations under the CDR Rules. Compliance with the CDR Rules on alternative notification schedules would require, at a minimum, implementation of a combination of options (being a combination of options listed below, other measures, or both).
CDR Rule 4A.14(1), (3)
Consent Management (Data holder): Joint account notification settings
17 December 2021