Australia. Data access / sharing. Act (Part) + Rules

CDRConsumer Data Right (Competition and Consumer Act 2010 Part IVD, inserted by Treasury Laws Amendment (Consumer Data Right) Act 2019)

In force
Partly verifiedMedium confidence. [Link: Competition and Consumer Act 2010 compilation; CDR is Part IVD]

§1Summary

Synopsis

Gives consumers the right to direct data holders in designated sectors to share their data with accredited recipients via standardised APIs. Thirteen Privacy Safeguards apply alongside the Privacy Act.

Key themes
  • data portability
  • accreditation
  • privacy safeguards
  • consent
  • data standards
  • designated sectors
Unique features

Sectoral open-data regime with accreditation and its own privacy safeguards stricter than the APPs.

SaaS relevance

Fintech/energy SaaS wishing to receive CDR data need accreditation or to operate under an accredited provider.

§2Dates

Key dates
  • Adopted
  • In force
  • Banking live July 2020; energy Nov 2022; telecoms designated 2022; non-bank lending from 2026

§3Text and authority

Text
Authority
ACCC (regulator) and OAIC (privacy safeguards)

§4Where it applies

Domestic law of
Australia
Also applies in

§5Sources and verification

Sources consulted
Verification

Medium confidence.

Partly verifiedMedium confidence. [Link: Competition and Consumer Act 2010 compilation; CDR is Part IVD]