The ACCC and the Office of the Australian Information Commissioner (OAIC) today jointly released the Compliance and Enforcement Policy for the Consumer Data Right.

The Policy outlines the approach that the ACCC and the OAIC have adopted to encourage compliance with, and address breaches of, the Consumer Data Right regulatory framework. The Policy has been developed following consultation with current and future data holders and recipients.

‘‘The Consumer Data Right is an important reform that will give consumers greater access to and control over their data,” ACCC Commissioner Sarah Court said.

“With this important reform come significant and serious safeguards.”

“It is the responsibility of each Consumer Data Right participant to be fully aware of their regulatory obligations or face scrutiny by the ACCC and the OAIC,” Ms Court said.

“Today’s release of the Compliance and Enforcement Policy helps clarify these obligations as people prepare to participate in the Consumer Data Right from July 2020.”

The ACCC and OAIC have adopted a strategic risk-based approach to compliance and enforcement, which focuses on building consumer confidence in the security and integrity of the Consumer Data Right system.

“My office and the ACCC will work in partnership to monitor and actively enforce participants’ compliance with their regulatory obligations, including the privacy safeguards,” Australian Information Commissioner and Privacy Commissioner Angelene Falk said.

“A strong regulatory framework is in place to protect privacy and build public confidence in the Consumer Data Right, and the Compliance and Enforcement Policy released today provides increased certainty about how we will uphold these consumer protections.”

“Economic reforms like the Consumer Data Right which build consumer confidence in the use of their personal information and encourage innovation will be critical to our recovery after the COVID-19 outbreak,” Commissioner Falk said.

The ACCC and OAIC will regularly review the Compliance and Enforcement Policy so that it continues to reflect best practice regulation and evolves with the Consumer Data Right regime.

A copy of the Compliance and Enforcement Policy is available online.

This media release was jointly issued with the Office of the Australian Information Commissioner.

Background

Principles

The ACCC and OAIC will adopt a strategic risk-based approach to compliance and enforcement which recognises the joint regulatory model and a requirement to deal with breaches of the legislation efficiently and effectively. Both agencies will act with integrity, professionalism and in the public interest, guided by the principles of accountability, efficiency, fairness, proportionality and transparency.

Compliance monitoring tools

The ACCC and OAIC will use a wide range of information sources and monitoring tools to assess compliance and identify potential breaches of the Consumer Data Right legislation (including Privacy Safeguards), Consumer Data Right Rules and Data Standards. These sources and tools will include:

• stakeholder intelligence and complaints
• business reporting, which will include summaries of Consumer Data Right complaint data
• audits and assessments
• information requests and compulsory notices.

Enforcement options

There are a range of enforcement options available to respond to and resolve breaches of the Consumer Data Right legislation (including the Privacy Safeguards), Consumer Data Right Rules and Data Standards. These include:

• administrative resolutions, whereby a business provides a voluntary written commitment to address a non-compliance issue
• infringement notices and court-enforceable undertakings
• suspension or revocation of accreditation by the ACCC (as the accreditor)
• determination and declarations, using the OAIC’s power to make a determination following an investigation, to either dismiss or substantiate a breach of a Privacy Safeguard or Rule relating to the privacy or confidentiality of Consumer Data Right data
• court proceedings (which may result in penalties, injunctions and other orders).

The ACCC has revoked an interim authorisation due to the change in market conditions caused by the COVID-19 pandemic. The ACCC granted the interim authorisation in February to five major car rental companies to jointly negotiate with Cairns Airport including discussions about their lease agreement for space, such as parking bays and counter space at the airport.

The rental companies, Avis, Budget, Hertz, Europcar, and Thrifty, had lodged their application for authorisation in late 2019, but since then, the COVID-19 pandemic has severely impacted the economy’s travel and car rental sectors.

The ACCC decided to revoke the interim authorisation after a request by the car rental companies that the ACCC delay its decision about the substantive application. This request has been granted.

The companies also indicated they would voluntary suspend collective negotiations, permitted under the interim authorisation, during the delay in considering the application.

“As the companies are not proposing to engage in the authorised conduct in the current circumstances, the interim authorisation is clearly no longer needed and it is appropriate we revoke it,” ACCC Commissioner Stephen Ridgeway said.

“Any authorisation, including interim authorisations, should only be in place for as long as they are needed.”

“The car rental companies have indicated they have no current need to be allowed to engage in the conduct, which, without authorisation, could be in breach of competition laws,” Mr Ridgeway said.

“We are closely monitoring when to revoke any interim authorisations, including those granted because of the COVID-19 pandemic, and we expect them to cease when they are no longer appropriate. We also expect authorised parties to keep the ACCC updated of any relevant changes that impact their authorisation.”

The substantive application involved a request for the five car rental companies to collectively negotiate all terms and conditions (both price and non-price) related to the acquisition of airport space and services from Cairns Airport under licence and lease agreements, including a turnover percentage, car parking fees, rental payment and concessions.

The interim authorisation did not extend to entering into collectively negotiated agreements.

“Irrespective of ACCC monitoring in place of the arrangements, allowing the interim authorisation to continue during this period could involve some risk of adverse effects to the interest of Cairns Airport, during the extended review timetable for this matter. The car rental companies can easily and quickly re-apply for interim authorisation at any stage if it becomes necessary,” Mr Ridgeway said.

The ACCC extended the timetable to make a final decision on the application for authorisation by six months. It will seek feedback from interested parties at a later stage.

More information, including the ACCC’s revocation authorisation decision, is available at Car rental operators at Cairns Airport.

Background

On 28 November 2019, the ACCC received an application by six car rental companies seeking authorisation for 10 years in relation to negotiations for space, including counter space, car parking bays and shared facilities, at Cairns Airport. The ACCC conducted public consultations.

On 13 February 2020 the ACCC granted interim authorisation to WTH Pty Ltd trading as Avis Australia, Budget Rent a Car Australia Pty Ltd, Hertz Australia Pty Limited, CLA Trading Pty Ltd trading as Europcar, and Kingmill Pty Ltd trading as Thrifty Car Rental and Dollar Car Rental to prepare for negotiations, and negotiate with Cairns Airport Pty Ltd.

A sixth rental company, Redspot Head Office Pty Ltd (trading as Enterprise, Alamo, National and Redspot), withdrew its request for authorisation on 28 April.

On 26 March 2020, the ACCC issued a draft determination proposing to grant authorisation for five years and sought submissions from interested parties.

Notes to editors

ACCC authorisation provides statutory protection from court action for conduct that might otherwise raise concerns under the competition provisions of the Competition and Consumer Act 2010.

Section 91 of the Act allows the ACCC to grant interim authorisation when it considers it is appropriate. This allows the parties to engage in the proposed conduct while the ACCC is considering the merits of the substantive application.

The ACCC may review a decision on interim authorisation at any time, including in response to feedback raised following interim authorisation.

Broadly, the ACCC may grant a final authorisation when it is satisfied that the likely public benefit from the conduct outweighs any likely public detriment.