Open Banking is part of Australia's Consumer Data Right (CDR) framework. It gives customers greater control over their financial data by allowing them to securely share eligible banking and lending information with accredited organisations they choose.

We participate in the Consumer Data Right ecosystem as a data holder. This means we make eligible customer data available to accredited data recipients when customers have provided the required consent and authorisation.

No. Participation in Open Banking is completely voluntary. You decide whether to share your data, who you share it with, and for how long you want the sharing arrangement to remain active.

Eligibility depends on the account type, customer relationship, and data holder. Customers with eligible accounts and products covered by the CDR framework may participate.

You can share your data only with accredited data recipients (ADRs) that have been accredited by the Australian Competition and Consumer Commission (ACCC), or with parties operating under the CDR framework.

The data available for sharing may include:

• Account information
• Product information
• Account balances
• Transaction information
• Loan account information
• Repayment information

The exact data available will depend on the product type and applicable CDR requirements.

Yes. We will only share eligible data when a valid customer consent and authorisation have been provided in accordance with Consumer Data Right requirements.

Reasons include:

• The account is not eligible for Open Banking.
• The account is not supported under the current implementation.
• Required borrower approvals have not been completed.
• A technical issue is preventing account retrieval.

You may be unable to share data because:

• Your account is not eligible for data sharing.
• The account is not currently supported.
• Additional authorisations are required.
• There is a temporary technical issue affecting the service.

Your data will only be shared for the period covered by your consent. Once the consent expires or is withdrawn, we will stop sharing your data unless otherwise required by law.

You can manage and view your data-sharing consents through the online dashboard, accessible using your Internet Banking credentials. The dashboard enables you to:

• View Data Sharing Arrangements and amendment history.
• Revoke Data Sharing Arrangements.
• Update CDR notification preferences.
• Add and remove Secondary User Instructions.
• Manage the Disclosure Options for their Joint Accounts.

Yes. You can withdraw your consent at any time through the accredited data recipient or through online customer dashboard available to you. Once withdrawn, data sharing will cease in accordance with CDR requirements.

When your consent expires, we will stop sharing your data with the accredited data recipient unless a new consent and authorisation are established.

Only Joint Account Customers may receive notifications regarding:

• New authorisations
• Data sharing arrangements
• Changes to existing authorisations
• Consent expiry
• Consent withdrawal

Notifications will be provided in accordance with applicable regulatory requirements.

Joint account and joint borrower data sharing is subject to Consumer Data Right requirements and any approvals that may be required from other account holders.

If you believe data sharing was not authorised:

• Review the account's data-sharing status.
• Contact us immediately.
• Contact the accredited data recipient if necessary.
• Submit a complaint if you believe the data sharing is unauthorised.

Reasons include:

• Required approvals from joint borrowers have not been completed.
• The account is not eligible for sharing.
• Joint account data sharing has been restricted or disabled.
• Technical issues are affecting the sharing arrangement.

The account is ineligible.

Yes. Open Banking uses secure application programming interfaces (APIs), strong authentication controls, and strict regulatory protections to help safeguard customer information. Customers do not need to share internet banking passwords with accredited recipients.

No. Open Banking does not require you to share internet banking credentials with accredited data recipients. Authentication occurs directly through the data holder's secure channels.

Only accredited data recipients and authorised parties operating within the Consumer Data Right framework can receive your data, and only where you have provided the required consent and authorisation.

We apply all security, privacy, governance, and operational controls required under the Consumer Data Right framework to protect customer data from unauthorised access, disclosure, misuse, interference, or loss.

Only if they are acting through an accredited data recipient and you have provided the necessary consent and authorisation under the Consumer Data Right framework.

Yes. You should be able to view active consents and data-sharing arrangements through the online dashboard and any consent management services made available under the CDR framework. Online dashboard, accessible using your Internet Banking credentials.

You can manage your consent through the customer dashboard. Available management options may include reviewing, amending, or withdrawing consent.

Once a consent is withdrawn:

• Future data sharing will stop.
• The accredited recipient will no longer receive updated data.
• Existing obligations regarding previously shared data will continue to apply in accordance with CDR requirements.

Try the following:

• Refresh the page and try again.
• Log out and log back in.
• Use a different browser or device.
• Try again later.
• Contact support if the problem continues.

If you continue to experience issues:

• Verify your account is eligible.
• Ensure all required authorisations have been completed.
• Check for any system outage notifications.
• Contact support for assistance.

You should contact us as soon as possible. We will investigate the matter in accordance with our obligations under the Consumer Data Right framework and our complaints management process.

You can lodge a complaint with us using our complaints process. We will investigate your complaint and respond in accordance with applicable regulatory requirements.

If you require assistance with Open Banking or Consumer Data Right data sharing, please contact us through the customer support channels published on our website.

The Consumer Data Right Policy is available in the Resources section of the website footer and explains:

• The types of data that may be shared
• How data sharing works
• Privacy protections
• Complaint handling procedures
• Your rights under the Consumer Data Right framework