The entity may only collect or use scheme data if the collection or use is through a secure access data service provided by an accredited data service provider.
