Consumer Data Right: Privacy Impact Assessment (December 2019)



Treasury has engaged Maddocks to prepare a subsequent iteration of the Privacy Impact Assessment (PIA) for the Consumer Data Right (CDR). A PIA is used to identify the impacts that a project may have on the privacy of individuals, and sets out recommendations for managing, minimising or eliminating these impacts. This assessment builds on the previous PIA prepared by Treasury.

The Treasury, Australian Competition and Consumer Commission (ACCC), Office of the Australian Information Commission (OAIC) and Commonwealth Scientific and Industrial Research Organization’s (CSIRO’s) Data61, as the agencies responsible for the design and implementation of the Consumer Data Right, have prepared a response to the recommendations set out by Maddocks in their PIA.

The PIA is a living document, and updates will occur where any changes to the CDR significantly impact upon privacy. The CDR Bill mandates assessments of privacy impact as part of the sector designation and rulemaking stages.