05a. Conditions involving notification prior to first collection when holding data as a data holder

1CO.05a.31

31

If the data recipient uses an outsourced service provider (OSP) to facilitate the collection of CDR data on their behalf, they must provide the details outlined in CDR Rule 4.11(3)(f). For more details, see Collection and use consents: Using outsource service providers. In instances where CDR data will only be disclosed to an OSP after collection, the data recipient does not need to provide these details.

CDR Rule 4.11(3)(f)

Consent: Collection and use consents

17 September 2025