What is the CPDA and when did it come into effect?

The Customer and Product Data Act (CPDA) is New Zealand's consumer data right legislation. It received Royal Assent and came into force in December 2025, establishing the framework for accredited requestors to access designated customer data from data holders such as banks.

What are the main obligations for a CPDA accredited requestor?

Accredited requestors must maintain appropriate security controls, manage consumer consent in accordance with the Act, only collect data authorised under active consents, handle data breaches within prescribed timeframes, and participate in dispute resolution processes. Fiskil's platform helps you meet each of these obligations.

Do I need to apply for CPDA accreditation myself?

No. When you sign up with Fiskil, we handle the CPDA compliance requirements including accreditation, consent management, and bank connectivity. You access NZ banking data through our API without needing to navigate the accreditation process yourself.

Which API standard does NZ open banking use?

New Zealand uses the Payments NZ API Centre specifications, currently at version 2.3.3. These are based on the UK Open Banking standard adapted for the NZ market, with OAuth 2.0 / FAPI security profiles and RESTful JSON APIs for account information access.

Can I use the same Fiskil integration for both NZ CPDA and Australian CDR?

Yes. Fiskil provides a unified API layer that abstracts the differences between NZ CPDA and Australian CDR. You write to one API and Fiskil handles the regime-specific consent flows, security profiles, and data formats for each market.

Banking API — Open Banking NZ

CPDA Accredited Requestor Compliance for New Zealand Open Banking

Meet Customer and Product Data Act (CPDA) accredited requestor obligations with Fiskil. Integrate with Payments NZ API Centre v2.3.3 standards, manage consumer consent, and access designated customer data from NZ banks.

The Customer and Product Data Act (CPDA), which came into force in December 2025, establishes New Zealand's framework for open banking and consumer data portability. Accessing NZ banking data requires CPDA compliance — but you don't need to navigate this yourself. Sign up with Fiskil and we handle the accreditation, consent management, and bank connectivity so you can focus on building your product.

The Challenge

The CPDA introduces new accreditation requirements and technical standards that businesses must meet to access consumer banking data in New Zealand.

The Solution

Fiskil provides pre-built compliance tooling and API infrastructure aligned to CPDA requirements and Payments NZ API Centre v2.3.3 standards, so you can focus on building your product rather than compliance plumbing.

Capabilities

How Fiskil Helps

CPDA Consent Lifecycle Management

Full consent lifecycle handling including collection, storage, renewal, and revocation in accordance with CPDA requirements. Consent records are maintained with audit trails for regulatory review.

Payments NZ API Centre v2.3.3 Conformance

Pre-built integration layer conforming to Payments NZ Account Information API specifications, including correct error handling, pagination, and event notification subscription.

Security Profile Alignment

OAuth 2.0 with FAPI 1.0 Advanced security profile implementation as required by the Payments NZ trust framework, including MTLS client authentication and signed request objects.

Compliance Dashboard and Audit Logging

Monitor consent status, data access logs, and API call history through a compliance dashboard. Export audit records for regulatory reporting and accreditation reviews.

Implementation

How It Works

Create your Fiskil account and tell us you want to access New Zealand banking data. We handle the CPDA accredited requestor requirements on your behalf.

Integrate Our API

Use Fiskil's Banking API to connect to NZ banks. We provide SDKs, documentation, and sandbox environments to get you up and running quickly.

Fiskil Handles Consent and Compliance

Fiskil manages the CPDA consent flows, security profiles, and bank connectivity. Your users see a seamless consent experience — you don't need to build any of it.

Access Customer Data

Start accessing account details, balances, and transaction history from NZ banks through Fiskil's unified API.

In Practice

How Teams Use This

Neobank Launching in New Zealand

A digital-only bank used Fiskil's compliance tooling to achieve CPDA accreditation and access customer transaction data from incumbent NZ banks for account switching and onboarding.

Achieved accreditation 6 weeks faster than estimated by leveraging pre-built compliance infrastructure, and onboarded 8,000 customers in the first quarter with compliant data access.

Personal Finance App Expanding to NZ

An Australian PFM app already using Fiskil's CDR integration expanded into New Zealand by adding CPDA accredited requestor capabilities through the same platform.

Launched NZ operations within 4 weeks using shared infrastructure, maintaining consistent compliance posture across both AU and NZ markets.

Accounting SaaS for NZ SMEs

A cloud accounting platform integrated CPDA-compliant bank feeds to automatically reconcile transactions for small business customers across multiple NZ banks.

Reduced manual bank feed setup from 3 days to under 10 minutes per customer, with full audit trail for every data access event.

Technical Details

What You Integrate With

API endpoints

POST /v1/consents
GET /v1/consents/{consentId}
DELETE /v1/consents/{consentId}
GET /v1/accounts
GET /v1/accounts/{accountId}/transactions

Data returned

Consumer consent records

Account details and balances

Transaction history

Product reference data

Consent audit logs

Authorisation

OAuth 2.0 with FAPI 1.0 Advanced / MTLS

Scheduled or batch data access.

Ready to get started?

Get your API keys today and start building with Fiskil's Banking API.

FAQs

Related Use Cases

Open Banking NZ

NZ Bank API Integration

Integrate with all major New Zealand bank APIs through a single connection. Fiskil provides unified access to ANZ NZ, ASB, BNZ, Westpac NZ, and Kiwibank via Payments NZ API Centre v2.3.3 standards.

Learn more

Open Banking AU

CDR Accreditation

Navigate CDR accreditation pathways — ADR, CDR Representative, or Sponsored — with Fiskil. Meet ACCC requirements, implement FAPI 2.0 security, and get to market faster with pre-built compliance infrastructure.

Learn more

Get started today

Talk to us about what you're building and we'll show you how we can help.

Speak with a Fiskil integration expert today