Is a signatory on a business or retail account considered an authorised agent?
Since this question was first raised, the ACCC has updated the CDR Rules.
For business consumers, the rules require data holders to offer a service allowing consumers to nominate representatives who can authorise and manage disclosure of CDR data on behalf of the business (Rule 1.13). These rules are intended to be non-prescriptive, to enable data holders a degree of flexibility in implementation, for example by leveraging existing permissions processes.
The rules do not currently have provisions directly relating to agents or attorneys on retail accounts. We are intending to provide guidance on this to stakeholders in due course.