CDR data scopes
The Consumer Data Right specifies exactly what your bank can share, and what stays private. Here's the full list of in-scope data, common out-of-scope items, and how BankSync uses each.
CDR banking covers account details, balances, transactions, regular payments, account-holder name, investment holdings and trades (where held inside an ADI), and loan balances. Out of scope: credit reports, identity documents, internal bank notes, and any data outside Authorised Deposit-taking Institutions. CDR is also read-only; initiating payments is a separate framework.
In scope under CDR.
- Account details
- Account name, masked number, type (savings/transaction/credit/loan), product info
- Account balances
- Current balance, available balance, credit limit (for cards)
- Transaction details
- Date, posted amount, merchant, description, reference, currency
- Regular payments
- Direct debits, scheduled payments, recurring authority list
- Account-holder name
- Name on the account; sometimes contact preferences
- Investment holdings
- Stock, ETF, and managed-fund positions where held inside an ADI brokerage
- Investment trades
- Buy/sell history, dividends received, corporate actions
- Loan and mortgage balances
- Outstanding balance, repayment history, interest rate, term
Out of scope.
- Credit reports
- Equifax / Experian / illion files; a separate consumer-data regime
- Identity documents
- Passport scans, driver licences, KYC photos
- Internal bank notes
- Customer-service notes, complaint records, fraud flags
- Action initiation
- Initiating payments or transfers; a separate CDR pillar, not yet live
- Standalone brokerage outside ADIs
- Stake, Pearler, SelfWealth; covered only if held via an ADI relationship
How BankSync uses each scope.
- Account details and balances
- Drive your dashboard and feed every destination (Sheets, Notion, Airtable, Excel) with up-to-date account context.
- Transactions
- The workhorse: synced into your destination on an hourly, daily, or weekly schedule depending on your plan and exposed to AI agents via the BankSync MCP server.
- Regular payments
- Power the "recurring expenses" views in Notion / Airtable templates.
- Investment holdings and trades
- Appear in the BankSync portfolio view and can be synced to Sheets or Airtable for net-worth tracking.
- Loan balances
- Streamed into balance and net-worth syncs so home loans and personal loans appear alongside savings.
Choosing a minimal scope.
You can decline any scope at the bank's consent screen. The trade-off: features that depend on a declined scope simply won't work. For example, declining transactions disables the Sheets / Notion / Airtable sync; declining balances breaks the dashboard. Pick the scopes that match the workflow you want.
Questions, answered.
What data scopes are available under CDR in Australia?
CDR banking covers: account details, account balances, transaction details, regular payments (direct debits and scheduled payments), and account-holder name. Where the institution holds them, investment holdings and trades are also exposed. Loan and mortgage balances are increasingly covered.
What data is out of scope under CDR?
Sensitive data such as credit reports, scanned identity documents, internal bank notes, and uploaded statements are out of scope. CDR is read-only, payments and transfers are not part of the data scope (CDR Action Initiation, when it lands, is separate).
Can I share only some scopes and not others?
Yes. At consent time you see each scope individually and tick what you authorise. You can authorise transactions but not balances, or balances but not transaction descriptions. The recipient must work with whatever you grant.
Does CDR include credit-card transactions?
Yes. Credit cards held with an Authorised Deposit-taking Institution are covered: account details, balances, available credit, transactions, and statement-level data are all in scope.
Are investment holdings and brokerage accounts in scope?
Yes for accounts held inside CDR-covered ADIs (CommSec via CommBank, NAB Trade via NAB, Westpac Online Investing). Standalone brokerages outside CDR are not covered today.
What does BankSync request from my bank?
By default BankSync asks for account details, balances, and transactions. If you opt into investments, it also asks for holdings and trades. Loan balances are added when you connect a loan account. You see the full list at the bank consent screen and can decline any of them.
Can the recipient see my pending transactions?
CDR exposes pending transactions where the bank surfaces them in its API. Most major banks expose pending state. BankSync syncs both pending and posted transactions, marking pending ones with a flag so you can filter.