Competition and Consumer Act 2010

The SPF rules may prescribe a scheme for authorising third parties to operate data gateways, portals or websites that give access to reports under this Division.

For the purposes of (but without limiting) subsection (1), the SPF rules may include the following:

provisions conferring functions or powers on the SPF general regulator under the scheme;

the criteria for a person to be authorised under the scheme;

provisions providing that authorisations may be granted subject to conditions, and that conditions may be imposed on an authorisation after it has been granted;

provisions providing that authorisations may be granted at different levels corresponding to different risks;

provisions specifying what a person authorised at a particular level is authorised to do (or not authorised to do);

provisions dealing with the period, renewal, transfer, variation, suspension, revocation or surrender of authorisations;

notification requirements on persons whose authorisations have been varied, suspended, revoked or surrendered;

transitional rules for when an authorisation is varied, is suspended or ends, including in relation to SPF personal information;

provisions for the making of applications for internal review, or of applications to the Administrative Review Tribunal for review, of decisions of a person under the scheme.

A person authorised under the scheme may use or disclose SPF personal information to the extent that this is reasonably necessary to achieve the object of this Part.