🇦🇺AustraliaLive·CDR

CDR consent duration

CDR consents last 7 days, 90 days, or up to 12 months — you pick at the bank's consent screen. Here's how to choose, what happens at expiry, and how to renew or revoke.

Choose a CDR bank, review consent, and connect with read-only access.

Quick answer

CDR consents last 7 days, 90 days, or up to 12 months. 12 months is the maximum allowed under CDR rules. You pick the duration at the bank's consent screen. The consent expires automatically; you can revoke it earlier from your bank or the recipient's app at any time.

The three durations

7 days

Best for

A one-off task, like a tax-time export or a single financial review.

Tradeoff

You re-authorise often if you keep using the connection.

90 days

Best for

Short-term projects, quarterly reporting, or testing a new tool.

Tradeoff

Quarterly re-consent prompts; not ideal for set-and-forget workflows.

12 months (max)

Best for

Ongoing automation: budget tracking, AI agents, dashboards, accounting feeds.

Tradeoff

You re-consent once a year; in exchange, the connection just works.

What happens at expiry

When a consent expires, the Accredited Data Recipient (or its CDR Representative) loses the right to fetch new data from the bank. The recipient's CDR Policy governs what happens to data already received. Common patterns:

  • Data is retained but flagged read-only, in case you re-consent and want history continuity.
  • Data is de-identified for analytics.
  • Data is deleted in line with the policy and your account settings.

How to revoke early

You can revoke at any time, no questions asked, from either side:

  • From your bank: every ADI must provide a CDR consent dashboard (look for "Data sharing" or "CDR" in your internet banking).
  • From BankSync: open a connected bank in your dashboard and click "Revoke consent".

Both actions take effect immediately and propagate within minutes. The consent record remains in the audit trail for both you and the bank.

good questions

Frequently asked questions

You choose at consent time: 7 days, 90 days, or up to 12 months. 12 months is the maximum permitted under the CDR rules. Once it expires, the recipient cannot fetch new data until you re-authorise.

Connect once, sync for 12 months

CDR-regulated. Auto-renewal prompts. 14-day free trial.

14-day free trial • Cancel anytime