The Australian Information Commissioner has powers to assess or audit whether a Consumer Data Right (CDR) participant follows the privacy safeguards or the relevant CDR rules when handling CDR data.
The Commissioner may also assess whether an accredited person who may become an accredited data recipient of CDR data is complying with Privacy Safeguard 1 or the relevant CDR rules.
For non-CDR assessments, see Privacy assessments.