Skip to content

Draft Privacy Impact Assessment – Consumer Data Right

On 9 May 2018 the Government committed to implement the Consumer Data Right (CDR) in line with the recommendations of the Review into Open Banking in Australia.

Treasury has prepared a first version of the Privacy Impact Assessment (PIA) for the CDR, in accordance with the Privacy (Australian Government Agencies – Governance) APP Code 2017. The draft PIA is based on the CDR regulatory framework proposed in the Treasury Laws Amendment (Consumer Data Right) Bill 2018. As recommended by the Office of the Australian Information Commissioner (OAIC) in its Guide to undertaking PIAs, extensive consultations have taken place on the privacy risks and concerns associated with introducing consumer data access and portability rights and the approach that is being taken to mitigate those risks. This has occurred as part of, for example:

  • the Productivity Commission’s Data Availability and Use Inquiry;
  • the Open Banking Review (OBR) and the Government’s consultation on the Final Report of the OBR; and
  • consultations on two drafts of the Bill.

The draft PIA documents the outcomes and learnings from these consultations.

The Government is seeking comments on this document by 5pm Friday 18 January 2019, to be considered as part of the development of a revised version.

The revised PIA, incorporating the views of the public as well as key decisions on the Consumer Data Rules and standards, will be completed ahead of the Autumn Parliamentary sitting period.


You can submit responses to this consultation up until 18 January 2019.

Interested parties are invited to comment on this consultation.

While submissions may be lodged electronically or by post, electronic lodgement is preferred. For accessibility reasons, please submit responses sent via email in a Word or RTF format. An additional PDF version may also be submitted.

All information (including name and address details) contained in submissions will be made available to the public on the Treasury website unless you indicate that you would like all or part of your submission to remain in confidence. Automatically generated confidentiality statements in emails do not suffice for this purpose. Respondents who would like part of their submission to remain in confidence should provide this information marked as such in a separate attachment.

Legal requirements, such as those imposed by the Freedom of Information Act 1982, may affect the confidentiality of your submission.

How to respond


Address written submissions to:

Consumer Data Right Team
Structural Reform Group
The Treasury
Langton Crescent
Parkes ACT 2600

Enquiries McAuliffe +61 2 6263 2804