Who regulates the CDR?

Modified on Mon, 7 Jul at 4:37 PM

The Consumer Data Right (CDR) in Australia is a big deal for giving consumers more control over their financial data. To make sure it runs smoothly and securely, several government bodies are involved in regulating it. Think of it like this: they each have a specific job to keep the system fair, safe, and working as it should.


Here's a breakdown of who regulates the CDR:


Australian Competition and Consumer Commission (ACCC): The ACCC is like the main referee of the CDR. They are responsible for the overall rules of the game. This includes:


  • Accreditation: They approve and accredit businesses (like LoanCheckr) to make sure they meet strict standards for handling your clients' data.

  • Compliance and Enforcement: They monitor everyone involved in the CDR (banks, energy companies, and accredited recipients) to ensure they're following the rules. If someone breaks the rules, the ACCC can take action

  • Register: They maintain a public register of all accredited participants, so you can see who's officially allowed to receive CDR data.


Office of the Australian Information Commissioner (OAIC): The OAIC is the privacy watchdog of the CDR. Their main focus is protecting your clients' personal information. Their role involves:


  • Privacy Safeguards: They enforce the privacy rules and safeguards that dictate how CDR data must be collected, used, and stored to protect consumer privacy.

  • Complaints: If a consumer has a concern or complaint about how their CDR data has been handled, the OAIC is often the first point of contact for investigating those privacy-related issues.

  • Guidance: They provide guidance to businesses on their privacy obligations under the CDR.


Treasury: While not a day-to-day regulator in the same way as the ACCC and OAIC, the Treasury plays a crucial role in shaping the CDR's future.


  • Policy and Rules: The Treasury leads the overall policy development for the CDR, including creating and amending the CDR Rules. They decide which new industries (like non-bank lending, which might include some of your partners) will be brought into the CDR framework.

  • Data Standards Body: Within the Treasury, there's also the Data Standards Body (DSB). This group develops the technical standards for how data is shared, ensuring consistency and security across the entire CDR system.


In simple terms, the ACCC makes sure everyone plays by the rules and accredits the players, the OAIC makes sure everyone's privacy is protected, and the Treasury sets the overall direction and expands the CDR to new areas. They all work together to build trust and ensure the CDR benefits consumers.

Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article