Part 3
Protections
Restriction on who may request regulated data service
42Only customer, secondary user, or accredited requestor may request regulated data service
A person must not request, or purport to request, a regulated data service that relates to a customer unless the person is—
- the customer; or
- a secondary user who is acting on behalf of the customer in accordance with section 24; or
- an accredited requestor that is—
- authorised by the customer to request the service; and
- acting within the class of its accreditation.
- authorised by the customer to request the service; and