BankSync
🇦🇺AustraliaLive·CDR

Consumer Data Right explained

Plain-language guide to Australia's regulated open banking framework — how consents work, who can access your data, and why CDR is fundamentally safer than screen-scraping.

Start free 14-day trialBack to Australia hub

Choose a CDR bank, review consent, and connect with read-only access.

Quick answer

The Consumer Data Right (CDR)is an Australian regulatory framework that gives you a legal right to share your bank data with accredited third parties. You authorise a scoped, time-bound consent directly with your bank — your credentials never leave the bank's site. Supervised by the ACCC and Treasury, CDR replaces the old practice of screen-scraping with a regulated, revocable, audited data flow.

CDR

Consumer Data Right

Regulator: ACCC & Treasury

Australia's Consumer Data Right (CDR) is the regulated open banking framework letting you securely share your bank data with accredited recipients. BankSync routes through Fiskil, an accredited Data Recipient (ADR).

Routed via Fiskil (Accredited Data Recipient — ADRBNK000246).

CDR overview (Treasury) →CDR register (ACCC) →Data standards (DSB) →

How CDR works in practice

When you connect a bank to BankSync, you are redirected to your bank's secure CDR authorisation page. You log in, choose what data to share (transactions, balances, etc.) and for how long (7 days, 90 days, or 12 months), and approve. Your bank issues a scoped access token to an Accredited Data Recipient (ADR). BankSync operates as a CDR Representative under Fiskil (ADR accreditation ADRBNK000246).

CDR vs screen-scraping

  • Credentials: CDR never sees your password; screen-scraping requires you to share it.
  • Scope: CDR consents are scoped to specific data types and durations; screen-scraping has unrestricted login access.
  • Revocation: CDR consents are revocable from your bank or BankSync at any time; screen-scraping access ends only when you change your password.
  • Regulation: CDR is supervised by the ACCC and Treasury; screen-scraping is not.

What data is shared

Only the scopes you authorise. Common ones include account details, balances, transactions, regular payments, and account-holder name. Sensitive data like credit reports is out of scope. You see exactly what is being shared at consent time and can review or revoke it anytime in your bank's CDR dashboard.

Which banks are covered

CDR is mandated for the entire Australian Authorised Deposit-taking Institution (ADI) sector — Big 4 banks, regional banks, neobanks, mutuals, credit unions, and brokerages with banking licences. The full register is at cdr.gov.au.

Deep dives on CDR

Plain-language explainers for each piece of the Consumer Data Right framework.

CDR vs screen-scraping →

Why password-sharing is on the way out, and how CDR replaces it with regulated, scoped, revocable consents.

Accredited Data Recipients →

What ADR accreditation requires, the role of CDR Representatives, and how to verify any provider.

Consent duration →

The three durations (7 days, 90 days, 12 months), what happens at expiry, and how to renew or revoke.

Data scopes →

The Australian account data BankSync currently supports through Fiskil CDR—transactions and balances—and what remains outside that connection.

good questions

Frequently asked questions

The Consumer Data Right is an Australian regulatory framework, introduced in 2020 and overseen by the ACCC and Treasury, that gives consumers a legal right to share their bank data with accredited third parties. It was the world's first economy-wide data-portability regime and now covers banking, with energy and telecommunications rolling out.

Sync your bank data via CDR

Free 14-day trial. CDR-regulated. Cancel anytime.

Start Syncing Your Financial Data

14-day free trial • Cancel anytime