Australia's Consumer Data Right in 2026: Open Banking, Energy, and the Open Finance Push

Australia’s Consumer Data Right (CDR) framework was conceived as the most-ambitious cross-sector open-data regime in any country. The original plan: launch in banking, then energy, then telecommunications, then progressively across the economy. The reality through 2020-2026 has been more measured — banking is operational, energy is in operational stages, the broader expansion has been slower than the initial vision suggested. But the framework is real, the participants are growing, and the use cases are increasingly substantive.

I want to walk through where CDR actually sits in 2026.

The framework structure#

The CDR establishes data-sharing-with-consent across sectors, with sector-specific implementations:

Open Banking — operational since 2020 for the major banks, with progressive expansion to smaller institutions through 2022-2024. The most-developed sector.

Open Energy — operational from 2022, with substantial 2024-2026 development.

Telecommunications — designated but not yet operationally launched at scale.

Other sectors — under various stages of consideration.

The framework is anchored by:

• The Consumer Data Right rules under the Competition and Consumer Act 2010.
• The OAIC (Office of the Australian Information Commissioner) for privacy aspects.
• The ACCC as the lead regulator.
• Data Standards Body for technical standards.

Open Banking specifically#

CDR Open Banking has reached substantial operational maturity:

Participating institutions — all major Australian banks plus a growing list of smaller institutions and credit unions.

Accredited Data Recipients (ADRs) — the equivalent of UK TPPs. Number has grown to dozens of accredited entities.

Use cases — primarily account aggregation, lending decisioning, and increasingly payment-related applications.

Volume — has been growing but smaller than UK Open Banking equivalent in absolute terms.

The structural differences from UK Open Banking:

• Read-only initially; payment initiation came later and has been more measured.
• Strict accreditation requirements — substantially higher bar than UK’s PSD2 framework, producing fewer but more-prudentially-sound ADRs.
• Strong consumer-protection focus integrated with the data-sharing framework.

Open Energy#

CDR Open Energy operates similarly:

• NMI (National Meter Identifier) and customer data sharing across electricity retailers.
• Use cases focused on switching, comparison, and emerging energy services.
• Operational scale smaller than Open Banking but growing.

The Australian energy market’s specific structure (the NEM — National Electricity Market — across most states) produces particular Open Energy patterns.

The expansion question#

The CDR’s broader expansion — to telecommunications, then to other sectors — has been slower than originally projected. The reasons:

• The implementation cost at participating institutions has been substantial.
• The accreditation pathway has been demanding.
• The use-case development has lagged the technical capability in some sectors.
• The political environment has shifted with various reviews and policy reconsiderations.

The 2024-2025 reviews have produced recommendations for streamlining the framework. The trajectory through 2026 remains gradual expansion with selective sector additions.

The international parallels#

CDR parallels:

• UK Open Banking (covered here) — narrower in scope, faster to scale.
• Brazil Open Finance (covered here) — broader in scope, faster operational rollout.
• India Account Aggregator (covered here) — different architecture, similar outcomes.

Australia’s CDR is one of the more-rigorous frameworks but has produced less operational volume than some peers.

Practical integration#

For a fintech building CDR integrations in 2026:

1. Become an Accredited Data Recipient — the rigorous pathway.
2. Implement the technical standards including the OAuth2/OIDC profile with CDR-specific extensions.
3. Build the consent UX — the customer authenticates at their bank.
4. Wire up the data pipeline with appropriate retention and use governance.
5. Compliance and monitoring ongoing.

Several specialized infrastructure providers (Adatree, Frollo Tech, others) provide CDR access as a service.

What’s coming in 2026 and 2027#

Three things to watch:

Open Banking 2.0 — Payment Initiation scale-up.

Open Energy maturity with broader use case development.

The broader CDR expansion continues at measured pace.

Where pdpspectra fits#

Our fintech engineering work spans Australia and the broader Asia-Pacific. We work with fintechs on CDR integration, platform engineering, and the operational compliance.

Related reading: the UK Open Banking post, the India Account Aggregator post, and the Brazil Open Finance post.

---

Australia’s CDR is rigorous and gradually expanding. Talk to our team about your integration.