Skip To Content
Report: an Inside look at Open Banking

Data holder solution

Simplify data holder
compliance

Expert guidance and peace of mind as we manage your data holder obligations. Partner with a single provider for a comprehensive CDR solution.

Used by organisations including

What is a data holder?

Data Holders sit within the CDR ecosystem which is legislated by the Australian Government. They are entities that hold consumer data and are authorised to provide access to that data to other parties, known as Accredited Data Recipients, based on a consumers explicit consent.

Learn more

What are the requirements for data holders?

Security & privacy

Data holders must implement robust security measures to protect the consumer data they hold. This includes encryption, access controls, and regular security assessments. Privacy considerations are also crucial, and data holders need to ensure that consumer data is used only as intended and in compliance with relevant privacy laws.

Interoperability

Data Holders need to implement technical standards and protocols that allow for secure and standardised data sharing between different entities within the CDR ecosystem. This ensures that the process is seamless and consistent for consumers and Accredited Data Recipients.

Consumer Consent

Before sharing consumer data with Accredited Data Recipients, Data Holders must obtain explicit and informed consent from the consumer. Consent should be granular, allowing consumers to specify which data they want to share and for what purposes.

Authorisation

Data Holders must be authorised by the Australian Competition and Consumer Commission (ACCC) to operate under the CDR framework. This involves meeting specific criteria related to data security, privacy, and technical capabilities.

Data Sharing

Data Holders are required to allow consumers to access their own data and share it with authorised third parties if the consumer gives explicit consent. This enables consumers to use their data to compare products and services, make informed decisions.

Data Accuracy
& Integrity

Data Holders are responsible for maintaining accurate and up-to-date consumer data. Consumers should be able to trust that the data being shared is correct.

Compliance
& Reporting

Data Holders are subject to ongoing regulatory oversight. They must report on their compliance with CDR rules and respond to any inquiries from the ACCC or other relevant authorities.

Complexity made simple

As part of the Cuscal group, our data holder solution is crafted to simplify the complexities of CDR compliance, providing a robust framework for secure data management and sharing.

We have you covered

All you need to do is build to the provided API specs

While we manage:

Streamlined
CDR authorisation, accreditation and compliance
journey

Compliance
& Ongoing
reporting to
the ACCC

Data sharing & Interoperability governance

Consent management

Security &
privacy compliance assessments

Why choose the Cuscal Group for your CDR solutions?

Our CDR solutions are crafted by:

Cuscal, leveraging over 50 years of experience and regulatory insight as an APRA-regulated ADI, blends payments, data, and digital identity to foster growth.

And enhanced by Basiq, a leader in Consumer Data Right (CDR) compliance enabling secure and compliant access to real-time enriched CDR data and insights.

Don't underestimate the complexity of building in house

Build in-house Work with trusted partner
Knowledge & skills Upskill staff or recruit Access to CDR experts
with specialist knowledge
Compliance You are solely responsible, including passing
the Conformance Test Suite (CTS)
We bear most of the compliance
burden, including CTS
Time to market Slower time to market Faster time to market
Lifetime cost Higher potential overall cost* Lower potential overall cost
Maintenance You monitor for regulatory changes
and implement updates
We monitor for regulatory changes
and implement updates for you
Reporting You are responsible
for ACCC reporting
We provide daily ACCC
reporting on your behalf
Opportunity Cost Resources spent on building
technology and operational compliance
Spend more time on what you do best!
High level implementation requirements
Product, Legal &
Compliance and Support
πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€ πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€
Project Governance πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€ πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€
Data Standardisation πŸ‘€πŸ‘€πŸ‘€πŸ‘€ πŸ‘€πŸ‘€πŸ‘€πŸ‘€
CDR APIs and Integration πŸ‘€πŸ‘€πŸ‘€πŸ‘€
Consent Management πŸ‘€πŸ‘€πŸ‘€πŸ‘€
Dashboard and Reporting πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€πŸ‘€
Licenses or Agreements πŸ“ƒπŸ“ƒπŸ“ƒπŸ“ƒπŸ“ƒ πŸ“ƒ
High level BAU resource requirements
Product, Legal &
Compliance and Support
πŸ‘€πŸ‘€πŸ‘€ πŸ‘€πŸ‘€πŸ‘€
Project Governance
Data Standardisation πŸ‘€πŸ‘€πŸ‘€πŸ‘€ πŸ‘€πŸ‘€πŸ‘€πŸ‘€
CDR APIs and Integration πŸ‘€πŸ‘€πŸ‘€πŸ‘€
Consent Management
Dashboard and Reporting
Licenses or Agreements πŸ“ƒπŸ“ƒπŸ“ƒπŸ“ƒπŸ“ƒ πŸ“ƒ

What's on for data holders in 2024?

CDR is expanding to include the non-bank lending sector, meaning specific Non-Bank Lenders will be designated as 'Data Holders' within the CDR framework.

Mortgage lender

Marketplace lender

Peer-to-peer lender

Payday lender

Buy-now-pay-later company

Customer finance company

Lending & hire purchase provider

Salary advance provider

You need to start preparing now so you're ready for deadlines

Nov 2024

Product Reference Data requests applies to Initial and Large providers

FEB 2025

Consumer data requests applies to Initial providers (except complex requests)

MAY 2025

Consumer data requests applies to Initial providers for complex requests

aug 2025

Consumer data requests applies to Large providers (except complex requests)

nov 2025

Consumer data requests applies to Large providers for complex requests

Other Products

Data

Access data feeds from banks & other financial institutions, super funds and energy providers with account information and detailed transaction history to gain a deeper understanding of your end users.

Learn more
Insights

Generate insights from financial data and get a complete financial picture of your customers. Understand income sources, financial commitments, risk metrics and obtain accurate expense categorisation and merchant insights.

Learn more