Australia's Consumer Data Standards provide APIs and security requirements for banking-data sharing under the Consumer Data Right. They align data holders and accredited recipients around shared information and authorised access, alongside the scheme's consent and privacy rules.
TL;DR:
- Australia’s Consumer Data Standards define banking data exchange under the Consumer Data Right.
- Data holders and accredited recipients use standard APIs, schemas and security controls.
- Public product data and consumer-authorised account data follow different access conditions.
Summary
Purpose and Scope
Australia's Consumer Data Standards provide APIs and security requirements for banking-data sharing under the Consumer Data Right. They align data holders and accredited recipients around shared information and authorised access, alongside the scheme's consent and privacy rules.
Technical and Experience Layers
The Data Standards Body describes technical standards for REST APIs, data schemas and security, alongside consumer-experience requirements for data language, authentication and accessibility.
Access and Permissions
Banking endpoints distinguish public product information from protected customer data. Authorisation scopes separate basic account details, more detailed account information and transactions. Data recipients need the appropriate participation and customer-authorisation context for protected information; public product APIs do not expose consumer accounts.
Version and Scope
Individual endpoints have their own versions requested through HTTP headers, with implementation and retirement dates. The maintained standards and applicable CDR rules determine current obligations.
Keywords
- CDR
- Australia
- Banking APIs
- Data Holders
- Accredited Recipients
- Consumer Consent
- REST APIs
- Data Schemas
- Security Profile
- Endpoint Versioning