Consumer Data Right

CDR is an Australian Government initiative that allows you to securely share your financial data with Accredited Data Recipients. For more information visit Homepage | Consumer Data Right

CDR can help you:

• Apply for products faster
• Reduce paperwork
• Compare products and services
• Access more personalised solutions

No, using CDR is completely optional. You choose whether to share your data, what you share, who you share it with, and how long you share it for.

Yes. CDR is regulated by the Australian Government and includes strict privacy and security requirements.

CDR involves two key participants:

• Data Holders (such as us) – organisations that securely hold your data
• Accredited Data Recipients – organisations approved to receive your data

If you give consent, your data can be securely shared from a Data Holder (like us or your bank) to an Accredited Data Recipient so they can provide a service to you. See a list of current providers.

Depending on your account, this may include:

• Your name and contact details
• Account information (such as balances)
• Transaction history

For more information visit How it works | Consumer Data Right

You must have at least one eligible open contract with us at the time of providing authorisation.

If you’re unable to view some accounts when you attempt to share your consumer data, the account may not be eligible for data sharing under CDR. Currently, your eligible single accounts are included in CDR data sharing. Joint accounts are currently not included and therefore unable to be shared.

For help with sharing account data, contact us at [email protected] or call 137 200 and mention ‘Consumer Data Right data sharing’ so that we can connect you with the right support.

No, CDR is designed to provide a secure way for you to share your data and manage your data sharing arrangements, without needing to provide your account, login, or other credentials to a third party.

Only organisations accredited by the Australian Competition and Consumer Commission (ACCC), or those permitted to operate within the CDR framework, can receive your data. See a list of current providers.

Your consent lasts for the period you agree to (up to 12 months). You can review, renew (extend) or withdraw your consent at any time.

Yes, you can withdraw your consent at any time in your Accredited Data Recipient dashboard or Data Holder dashboard. Once withdrawn, no new data will be shared.

If you withdraw your consent:

• Data sharing stops
• No new data will be shared with the Accredited Data Recipient following withdrawal of your consent.

You can view and manage active and past data sharing in your Accredited Data Recipient dashboard or Data Holder dashboard.

With CDR, you control your data. It is only shared when you ask us to, with a recipient you choose, and only for as long as you allow.

Your protections include:

• Your consent is required. Nothing is shared unless you agree to it, and you decide who receives it.
• Only Accredited Data Recipients. Any business that receives your data must be accredited by the regulator and meet strict security and privacy standards.
• Only what is needed. Sharing is limited to the data reasonably required for the product or service you asked for, not your full history.
• You can stop at any time. You can withdraw your consent whenever you want.
• Secure by design. Data is transferred using strong encryption, backed by government rules covering how it is collected, used, and disclosed.

CDR is a secure, regulated way to share data.

• You control what is shared
• You never share your login details
• Data is shared safely between accredited providers

Screen scraping is different:

• It may require you to share your login details with a third party
• It can provide broader access to your account than needed
• It is not part of the CDR system

CDR is designed to give you more control and better protect your data.

You may not be able to share your data if:

• You’re under 18
• Your account isn’t eligible
• Your provider doesn’t support CDR yet
• Your details can’t be verified

If you notice any of your consumer data shared with an Accredited Data Recipient is incorrect, please get in touch with us at [email protected] or call 137 200.

We will try to acknowledge your request as soon as possible. Once we’ve reviewed your request, you’ll receive an email from us either:

• Confirming that we have corrected your consumer data, or
• if we have not updated your consumer data, letting you know why we considered it unnecessary or inappropriate to do so, and
• the complaint mechanisms available to you.

Our Consumer Data Right policy describes your rights under the CDR legislation – including what data will be available for you to share, how to share your data, and how to make a complaint.

Download our Consumer Data Right Policy

If you have reviewed these FAQs and are still experiencing issues data sharing, contact us at [email protected] or call 137 200 and mention ‘Consumer Data Right data sharing’.

If you’d like access to your CDR records or have questions, concerns or complaints about your CDR data, please contact us at [email protected] or call 1300 650 351.

We will work with you to investigate and resolve your concern promptly.

If your complaint about our handling of your CDR data is not satisfactorily resolved, you can:

• contact us at [email protected] to raise your concerns;
• contact the Australian Financial Complaints Authority (a free of charge, external dispute resolution scheme) at afca.org.au or by calling 1800 931 678, or emailing [email protected];
• lodge a complaint directly with the Office of the Australian Information Commissioner via this form or calling 1300 363 992.