Part 1: Access to Customer Data and Business Data Data regulations Section 5: Business data: supplementary
Section 5 illustrates provisions that data regulations under section 4 may, among other things, contain. This section largely mirrors section 3 (customer data: supplementary) and, as with that section, data regulations do not have to contain all of the provisions envisaged by section 5 and neither are they limited to them.
	Subsection (2) envisages that regulations may require business data to be provided on request. The regulations may provide for requests for business data to be made by a customer, third party recipient or by other persons. If the regulations provide for the provision of data on request then, as with section 3(3) in relation to customer data, the regulations may contain provision about those requests including circumstances in which a data holder may or must refuse to act on a request.
	Subsection (3) envisages provisions restricting provision of business data to customers or to third party recipients who are approved to receive it. If so, as with section 3(2), the restriction may be achieved by conditions specified by or under the regulations (paragraph (a)) and the regulations may provide for a specified person (a decision-maker) to decide whether a person satisfies those conditions. Section 6 (decision-makers) contains further requirements about decision-makers, should the regulations make such provision.
	Subsection (4) envisages provisions about how business data is to be published or provided, reflecting, in relation to provision of business data, section 3(4).
	Subsection (5) envisages provisions requiring or enabling data holders and third party recipients to produce, collect, or retain records of their provision or (as the case may be) receipt of business data, reflecting section 3(5).
	Subsection (6) envisages that a person who processes business data may be required to assist a trader in complying with the regulations, reflecting section 3(6).
	Subsection (7)(a) to (d) envisages requirements on third party recipients, reflecting section 3(7)(a) to (d). Subsection (7)(e) envisages provisions about further disclosure of business data, including to make "downstream" recipients subject to some or all the requirements imposed by the regulations on customers or third party recipients.
	Subsection (8) envisages provisions enabling or requiring a data holder or third-party recipient to publish specified information about rights and obligations under the regulations, reflecting section 3(8).
	Subsection (9) envisages provision about complaints, which may include a requirement for data holders or third party recipients to implement complaints procedures, reflecting section 3(9).
	Subsection (10) envisages provisions for dispute resolution, reflecting section 3(10).
	Subsection (11) sets out what is meant by assistance in subsections (4)(d) and (7)(c), reflecting section 3(11).