The Consumer Data Right (CDR) is co-regulated by the OAIC and Australian Competition and Consumer Commission (ACCC). Each agency has defined investigation and enforcement powers.

The ACCC enforces the CDR Rules and data standards, oversees the Data Standards Body (CSIRO’s Data61), and carries out strategic enforcement. The ACCC also accredits data recipients, manages suspensions and revocations of accreditation, and maintains a register of accredited persons.

The OAIC enforces the privacy safeguards and related CDR Rules and advises the ACCC and Data Standards body on the privacy implications of the CDR Rules and Standards. We also undertake strategic enforcement in relation to the protection of privacy and confidentiality.

The OAIC investigates individual and small business consumer complaints regarding their handling of CDR data. Where appropriate, we may refer complaints to relevant external dispute resolution bodies or to the ACCC.

The Data Standards Body is responsible for making common data standards which explain the format and process by which CDR data needs to be provided to consumers and accredited data recipients within the CDR system.

Was this page helpful?

Thank you.

If you would like to provide more feedback, please email us at