About the Consumer Data Right (CDR)
The Australian Government has introduced laws to give consumers greater control over the information organisations hold about them (the Consumer Data Right or CDR).
The CDR regime is designed to help you, as a customer, access specified data (CDR data) relating to certain products that we offer (product data) that relate to you and allows us to share that CDR data (consumer data), with third party data recipients.
About our Consumer Data Right Policy
Our policy applies to BNK Banking Corporation Limited (ABN 63 087 651 849) (BNK Bank/Goldfields Money/BCHL) in its own right and trading as Goldfields Money (ABN 63 087 651 849) and to its subsidiary Better Choice Home Loans ACN 095 728 868 (Better Choice”). The terms “we”, “us” or “our” used in this policy are references to BNK and Better Choice, as applicable.
Where BNK holds CDR data about you, you can ask us to share that data with other accredited data recipients. This policy describes your rights under the CDR legislation.
You should read our CDR Policy together with our Privacy Policy.
This policy may change as a result of future provisions or updates to the CDR legislation. The most current version of the policy will be published on our website and is also available on request.
For more information on the Consumer Data Right, click here: What is CDR? | Consumer Data Right
Sharing your consumer data
An eligible customer can share their data with an Accredited Data Recipient (ADR), such as a budgeting app or internet banking app, once they authorise us to do so.
You are eligible to share your banking data if you:
- Are an individual 18 years of age or over; or
- A person 18 years of age or over representing a company or a partnership; and
- Have a BNK product that is accessible online; and
- Have a valid mobile phone number connected to your BNK account (required to authenticate with a one-time-password (OTP).
Note: We will never ask for your internet banking password when sharing data using the CDR)
Accessing you consumer data
- In your ADR app or website, Select BNK Bank (Goldfields Money/BCHL) to commence the data sharing consent process
- Select the banking data you would like to share
- Select the period you would like to share your data for (e.g. once, 3 months, 6 months or 12 months. Cannot be more than 12 months).
- You will be prompted to enter your BNK login credentials and then verify who you are using an OTP. You will never be asked for your internet banking password when sharing data using the CDR.
- Next, you will see BNK screens where you can select the entity and accounts that you would like to share data from
Confirming the data being shared, you will then be returned to the ADR app or website you have elected to share data with.
You can view, manage or revoke your data sharing consents at any time using your data sharing dashboard which can be accessed using the link below. The data sharing agreement you have with each ADR governs how your CDR data is deleted or de-identified after your sharing consent is revoked.
For more information, please refer to our policy which describes what data will be available for you to share and how to make an enquiry or complaint.
Download our Consumer Data Right (CDR) Policy here
Open Banking Frequently Asked Questions (FAQs)
Q: What is Open Banking?
A: Open Banking is the term banks use for the introduction of the sharing of information under the Consumer Data Right.
The Australian Government has introduced laws to give consumers greater control over the information organisations hold about them (the Consumer Data Right or CDR).
The CDR regime is designed to help you, as a customer, access specified data (CDR data) relating to certain products that we offer (product data) that relate to you and allows us to share CDR data that we hold as a data holder (consumer data) that you authorise us to share, with third party data recipients. If you are a joint account holder, the CDR data we hold about joint accounts will only be shared where the sharing of that data is agreed to by the other joint account holder(s).
Q: What can I do with Open Banking? Is it good for me?
A: Open Banking will give BNK customers the ability to share their data with accredited data recipients through a secure system.
It is intended to make the financial services industry more competitive while helping customers to reduce paperwork, negotiate a better deal and save money. For instance, by sharing your product information, you may be able to compare similar products and find the best product for your needs more easily. Rest assured, customer participation in Open Banking is 100% optional.
Q: Who can share their data?
A: Eligible individuals (single person only) and joint Account Holders who are 18 years or older, and representatives of partnerships, corporate trustees and companies with an online account are able to share data regarding their eligible accounts.
*Note: at the time of publishing, secondary users requirements are yet to be implemented by us in accordance with the CDR Regime.
In accordance with the relevant CDR legislation, eligible joint accounts are already set up for CDR data sharing and you won’t need approval from other joint account holders to share your CDR data with participating accredited parties.
Any eligible joint account holder can stop their CDR data from their joint account from being shared with participating accredited parties at any time. If you choose to disable your joint account, you and all other joint account holders will need to approve and re-enable your consents for CDR data sharing.
For partnerships, corporate trustees and companies, authorised signatories to the accounts can elect themselves as a Nominated Representative so they can give, vary, manage and/or revoke authorisations to share data of current or closed eligible accounts. To get set up or remove a Nominated Representative, please complete this form.
Please note that Consumer Data Right (CDR) data sharing is not currently enabled for all products offered by BNK Banking Corporation Ltd. As a result, data sharing may not be available for every product or account you hold with us. If you require further information or have questions about the availability of CDR data sharing for your accounts, please contact us directly on 1300 265 226.
Q: How do I view and manage who I am sharing data with?
A: You can view and manage your data sharing on the accredited third-party app you are using the data with or via the BNK Open Banking Dashboard
On your BNK Open Banking Dashboard, you will see a list of all the ADRs you are sharing data with now and in the past. You will be able to view their details, the data being shared, any amendments to the authorisation and when your authorisation will expire or has expired. You also are able to immediately stop sharing data with any ADR by pressing the “Stop sharing” button on the details screen for any currently active sharing arrangement.
If you are having issues accessing your dashboard, please contact us on 1300 265 226 during business hours, Monday to Friday 7am to 5pm AWST. Or email cdr@bnk.com.au
Q: My data doesn’t look correct. What do I do?
A: If you think your data is incorrect, please contact us:
- Phone: 1300 265 226 (during business hours)
- Email: cdr@bnk.com.au
If you ask us to correct your Consumer Data Right (CDR) data and we’ve already disclosed that data, we will:
- acknowledge receipt of your request as soon as practicable; and
- correct the data (to the extent we can) within 30 business days of your request, free of charge.
- notify you as to how we responded to your request or, if it was not considered appropriate to correct the data, tell you why a correction is unnecessary or inappropriate and advise you of our complaint process if you are not satisfied with our response.
If we become aware of any inaccurate, out of date or incomplete CDR data we will advise you, via email, within , including the following details:
- The error in the CDR data
- The ADR(s) who received the incorrect CDR data
- The date of disclosure
- That BNK will disclose the corrected CDR data (at no charge) to the ADR if requested by you
- Our complaint process, if you are not satisfied with our response
Q: Where can I get more information about open banking and Consumer Data Right?
A: To find out more information about open banking and the CDR Click here
Q: How safe is Open Banking?
A: Your privacy is our priority. We understand that giving third party access to your banking data may be a little daunting. Rest assured, Open Banking mandates privacy safeguards and other protections that seek to ensure your data is shared safely and securely. These include:
- You choose if you want to participate and who you share your data with and when.
- Only third parties that are accredited by the ACCC can seek permission to access your data.
- You can manage what data you share and cancel sharing at any time
- You can ask for your data to be deleted by the ADR. You can authorise an ADR to access your data for a nominated time, up to 12 months.
- After 12 months, an ADR’s access to your data will automatically expire, although you can revoke your consent earlier than this. This means they will not have access to your data for an indefinite amount of time.
Open Banking Troubleshooting
Q: I can’t share my data with an accredited provider.
A: This issue may occur due to connectivity problems, expired consents, or provider accreditation status.
- Ensure the provider is accredited by the ACCC
- Check that your internet connection is stable
- Confirm that your CDR consent is still valid and hasn’t expired
- Try restarting the data sharing process from your banking app or portal
Q: I can’t see my accounts listed for sharing
A: Not all accounts are eligible for data sharing under CDR
- Ensure the account is eligible for CDR sharing
- Joint accounts may require additional authorisation
- Check if the account is active and not restricted
Q: Technical Issues with the CDR Interface
A: Technical glitches can sometimes prevent smooth operation of the CDR interface.
- Clear your browser cache or try a different browser
- Make sure your app or browser is up to date
- Disable browser extensions that might interfere with the process
- Phone: 1300 265 226 (during business hours) or Email: cdr@bnk.com.au if the issue persists
Q: I didn’t receive the One-Time Password (OTP) for verification
A: OTPs is required to verify your identity before sharing data
- Ensure your mobile number is up to date with the bank
- Check for signal issues or SMS blocking settings
- Try resending the OTP after a short wait
- Phone: 1300 265 226 (during business hours) or Email: cdr@bnk.com.au if the issue persists
Open Banking product API
Under the Consumer Data Right (CDR), we provide public access to information about our banking products through secure APIs.
For technical specifications and usage guidelines, please visit the Consumer Data Standards website.
Product
Retrieve a list of all current banking products offered via our Open Banking service.
GET https://prd.pm.productdata.au/66425b31-d376-4924-be6d-9f6acf254db2/adapter/cds-au/v1/banking/products?effective=CURRENT Host: prd.pm.productdata.au Accept: application/json Headers: x-v: string (for example, 3) x-min-v: string (for example, 1)
Product details
Retrieve detailed information about a specific product by using its unique product ID.
GET https://prd.pm.productdata.au/66425b31-d376-4924-be6d-9f6acf254db2/adapter/cds-au/v1/banking/products/{productId} Host: prd.pm.productdata.au Accept: application/json Headers: x-v: string (for example, 4) x-min-v: string (for example, 1)
Please note:
- The request must be a HTTP GET to the relevant product API endpoint.
- At a minimum, include all mandatory parameters as defined in the Consumer Data Standards.
- These are public APIs and do not require authentication.
- The response will be in the standard format defined by the Consumer Data Standards.