(1) The privacy safeguards only apply to CDR data for which there are one or more CDR consumers.
Note: One requirement for CDR data to have a CDR consumer is that there needs to be at least one person who is identifiable, or reasonably identifiable, from the CDR data or from related information (see paragraph 56AI(3)(c)).
(2) The privacy safeguards apply to CDR data whether the CDR data is true or not.