05a. Conditions involving notification prior to first collection when holding data as a data holder

1CO.05a.03

03

(2) An accredited person must not ask for a collection consent, use consent or disclosure consent unless the collection, use or disclosure of CDR data in accordance with the consent would comply with the data minimisation principle.

CDR Rule 4.12(2) | OAIC Chapter C: Consent (Data minimisation principle) | CX Research 1, 3

Consent: Collection and use consents

17 September 2025