Open Banking in Australia

Australia's Consumer Data Right (CDR) represents one of the most ambitious open data initiatives globally. Unlike frameworks limited to financial services, the CDR is designed as an economy-wide, sector-by-sector data portability scheme underpinned by legislation. It gives consumers the right to share their data held by businesses with accredited third parties of their choice.

The CDR was established through the Treasury Laws Amendment (Consumer Data Right) Act 2019, following the Open Banking Review led by Scott Farrell. The framework is jointly administered by the ACCC (rule-making and accreditation), the Office of the Australian Information Commissioner (privacy), and the Data Standards Body within CSIRO's Data61 (technical standards).

Banking was the first designated sector. The Big Four banks went live in mid-2020, followed by all Authorised Deposit-taking Institutions (ADIs) in 2021. The Consumer Data Standards provide comprehensive API specifications, covering product reference data, account data, transaction data, and direct debit and scheduled payment information. The security model is based on OAuth 2.0 with PKCE and mutual TLS, with a strong emphasis on consumer consent management.

The CDR has since expanded to the energy sector, where major electricity and gas retailers now share product and usage data. The Australian Government has also designated non-bank lending and is considering telecommunications and superannuation (pensions) for future inclusion. Action initiation, which would enable third parties to initiate payments or switch products on behalf of consumers, is under active development.

The cross-sector design of Australia's CDR distinguishes it from purely financial-services-focused open banking regimes. By building a common consent model, accreditation framework, and data standards architecture, Australia is creating a reusable infrastructure that can scale to any industry where consumer data portability delivers competitive benefits.