Banking APICross-Tasman

CDR and CPDA Dual Compliance for Australia and New Zealand

Implement compliant open banking across both Australia and New Zealand from a single platform. Fiskil handles the differences between CDR (ACCC-regulated) and CPDA (MBIE-regulated) accreditation, consent, and data standards.

Dodo logo
Nissan logo
Light logo
Red Zed logo
Wage Tap logo
BDO logo
Adyen logo
Alex bank logo
AGL logo
Brighte logo
Data Zoo logo
Alinta logo
Tango logo
Dodo logo
Nissan logo
Light logo
Red Zed logo
Wage Tap logo
BDO logo
Adyen logo
Alex bank logo
AGL logo
Brighte logo
Data Zoo logo
Alinta logo
Tango logo

The Challenge

Operating across Australia and New Zealand requires navigating parallel but different open data regimes, each with its own regulator, accreditation process, and technical requirements.

The Solution

Fiskil abstracts the differences between CDR and CPDA into a single API, handling jurisdiction-specific consent, accreditation requirements, and data formatting transparently.

Capabilities

How Fiskil Helps

Jurisdiction-Aware Consent Management

Automatically apply the correct consent model based on the data holder's jurisdiction. CDR data cluster consents for Australian institutions; CPDA-compliant consent scopes for New Zealand institutions.

Dual Accreditation Support

Fiskil maintains accreditation under both frameworks, so clients integrating through Fiskil can access both markets via sponsored or principal accreditation paths without managing dual registrations independently.

Unified Security Model

Implement FAPI 1.0 Advanced (CDR requirement) and Payments NZ security profiles through a single authentication flow. Token management, MTLS, and PKCE are handled per-jurisdiction automatically.

Regulatory Change Monitoring

Fiskil tracks rule changes in both CDR (ACCC rule amendments) and CPDA (MBIE regulatory updates) and updates the platform to maintain compliance, insulating clients from regulatory maintenance.

Implementation

How It Works

1

Single API Integration

Integrate with Fiskil's Banking API once. The API interface is identical for both markets — you don't build separate integrations for AU and NZ.

2

Configure Jurisdictional Settings

Set your compliance parameters for each market. Fiskil's dashboard allows configuration of consent durations, data retention policies, and notification preferences per jurisdiction.

3

Route Connections by Market

When a user connects a bank account, Fiskil automatically detects the institution's jurisdiction and applies the correct regulatory framework — CDR for Australian banks, CPDA for New Zealand banks.

4

Monitor Compliance Dashboard

Track consent status, data access logs, and compliance metrics for both markets in a unified dashboard. Generate jurisdiction-specific compliance reports for audits.

Ready to get started?

Get your API keys today and start building with Fiskil's Banking API.

FAQs

Integrating through Fiskil can simplify accreditation requirements. For CDR, Fiskil supports sponsored accreditation under our principal ADR status. For CPDA, the accreditation model is being finalised by MBIE, and Fiskil will support the equivalent pathway as it becomes available.

CDR consent is based on data clusters defined in the CDR Rules, with specific duration limits and granular scope. CPDA consent operates under New Zealand's Privacy Act 2020 framework with different scope definitions. Fiskil abstracts these differences so your application uses a unified consent interface.

Fiskil normalises responses into a unified data model. Account and transaction data follow the same schema regardless of whether the source is an Australian CDR data holder or a New Zealand CPDA participant.

Fiskil monitors both regulatory environments continuously. When changes occur, Fiskil updates the platform to maintain compliance and notifies affected clients with impact assessments and any required action items.

Complaints are handled by the regulator in the jurisdiction where the data holder operates. For Australian institutions, the ACCC and OAIC have oversight. For New Zealand institutions, MBIE and the NZ Privacy Commissioner have jurisdiction. Fiskil's compliance layer routes obligations to the correct regulator.

Get started today

Talk to us about what you're building and we'll show you how we can help.

Loading Contact Form...
Fiskil logo

© Fiskil 2026. All rights reserved.

CDR and CPDA Dual Compliance for Australia and New Zeal...