Open Banking is coming – through the Consumer Data Right

The Government announced today that the banking sector will be the first in New Zealand to implement a new Consumer Data Right (CDR) in an executive push towards “open banking” – confirming the expectations of most in the sector.

Open Banking is coming – through the Consumer Data RightOpen Banking is coming – through the Consumer Data Right
Category
Insight | Tech
Insight
|
Tech
Published Date
10
November 2022
Reading Time

It’s all happening in fintech regulation.

The Government announced today that the banking sector will be the first in New Zealand to implement a new Consumer Data Right (CDR) in an executive push towards “open banking” – confirming the expectations of most in the sector.  

Open banking allows customers to securely share their own banking data with trusted third parties through standardised technology. In practice, it relies on legislation to compel banks (and other data holders) to share customer data if the customer provides consent. The goal is to make it easier for consumers to compare financial products and services and switch between banks, and to encourage the development of new fintech solutions through better access to financial data (think smart digital lending, wallets and investment platforms). It also has the potential to drive innovation in payments, as it can be used to allow accredited parties to initiate payments on a consenting customer’s behalf.

Over time, the CDR will be extended to other sectors, which (the Government hopes) should give consumers access to a wider range of products and services at more competitive prices.

Open banking is established practice overseas. And New Zealand has already made some progress towards building the infrastructure for open banking, through Payments NZ’s API Centre programme. The API Centre has established an industry-led form of open banking – reliant on an agreed set of rules and individual commercial contracts as opposed to legislation.  

A CDR has been mooted by the Government since July 2021 but, notwithstanding today’s announcement, still looks to be some time away. Commerce and Consumer Affairs Minister David Clark says the Government will now begin consultation on the open banking framework, with the expectation that legislation be passed within two years. Although the issues are complex (other regimes have struggled with challenges like accreditation of participants, development of standards and consumer adoption) – New Zealand has had the advantage of a ringside seat as similar regimes were rolled out in the UK and Australia. We can also draw on the existing work and knowledge gained from the API Centre programme.

The CDR is also likely to play an important role in the implementation of “Buy Now, Pay Later” (BNPL) regulation announced by the Government this month. Because BNPL products don’t charge interest or fees (other than default fees) or take security, they have not been required to comply with the Credit Contracts and Consumer Finance Act 2003 (CCCFA). This means that BPNL providers are not currently legally obliged to assess a customer’s financial position or make their own assessment about the customer’s ability to repay the debt without substantial hardship, as required under the CCCFA.    

The Government has now proposed to apply the CCCFA to BNPL, although smaller loans below a threshold (currently proposed at $600) will be exempt from the CCCFA requirement to assess affordability. In theory, it could be possible for BNPL providers to conduct real-time (or at least highly efficient) affordability assessments if they had visibility over the income and expenses of their customers. In practice, this could make BNPL significantly more difficult without open banking. The CDR will apply to bank account information, and open banking could facilitate real-time assessments of whether an individual transaction is affordable to a consumer.  

If that wasn’t enough to keep the sector on its toes, regulations take effect this week (13 November) that are designed to reduce the fees that businesses must pay to accept Mastercard and Visa payments. The initial pricing standard under the new Retail Payment System Act 2022 limits interchange fees for Mastercard and Visa credit and debit transactions by setting fee caps. It is intended to reduce costs to merchants, and the Commerce Commission (which monitors the retail payment system) has stated that it “expects” those savings to be shared with consumers.

Grappling with these developments (and multiple moving parts) will be top of mind for many in the banking and fintech sector right now.

Social media image credit: Andre Taissin

Services in this insight

Technology & Telecommunications

Navigate innovation, risk and opportunity with commercially focused guidance.

Data, Privacy & Cybersecurity

Stay ahead of evolving privacy, cybersecurity and governance demands.

Services in this insight

Technology & Telecommunications

Navigate innovation, risk and opportunity with commercially focused guidance.

Data, Privacy & Cybersecurity

Stay ahead of evolving privacy, cybersecurity and governance demands.

Services in this insight

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore.

Technology & Telecommunications

Navigate innovation, risk and opportunity with commercially focused guidance.

Data, Privacy & Cybersecurity

Stay ahead of evolving privacy, cybersecurity and governance demands.

Previous Article
Next Article

From Hertzian waves to hyperlinks – What the BSA’s online decision means for your business

Space Law in New Zealand — Signals from the ground

Cyber security changes flagged for New Zealand

The four Cs of successful fintech partnerships

New rule 3A introduced to the Biometric Processing Privacy Code

IPP3A is nearly in force – What agencies need to know

OPC shifts public enquiries online – What agencies should do now

AI as a confidante? Legal privilege and the ever-increasing use of AI

New Therapeutic and Health Advertising Code – What you need to know

Building blocks of trade mark law: New Zealand approach to "use as a trade mark" now compatible with Australia

Consumer law update 2025

Open banking launches in New Zealand

Is fair something to fear? The Government announces beefed-up Fair Trading Act

Is it fair? Lessons from Bartz v Anthropic and Kadrey v Meta

Open banking almost live

Why New Zealand businesses should care about the EU Data Act

Product labelling changes flagged for New Zealand

Biometric Processing Privacy Code 2025 introduced to New Zealand

Open banking regulations released for consultation

Ten tips for buy-side M&A success

A recipe for disaster – Is caramel a copyright work?

Becoming a Globally Renowned Fintech Nation (and how regulation can light the path)

Important changes made to the Privacy Act

New Zealand may ban social media for young users

Customer and Product Data Act update – Open banking officially on the way

Tips from the trenches – Your AI policy cheat sheet

Significant regulatory reform proposed for New Zealand media

Security guidance released for emerging tech companies

Customer and Product Data Bill – Select Committee reports back

Consumer law update 2024

New Zealand’s Artist Resale Royalty is ready to go

The shape of coffee – “Moccona” vs “Vittoria”

New Zealand’s Copyright Act gets a sense of humour

WIPO’s traditional knowledge treaty is adopted

Doing business in the Middle East

AI and advertising – What producers need to know

Seven contract clauses every freelancer needs

Baby Reindeer – When truth is stranger than fiction?

Our comments on the Biometric Processing Privacy Code

Therapeutic Products Act to be repealed this year

Is End-to-End to end?

Geographical indications – Changes uncorked by the EU-NZ Fair Trade Agreement

Lawyers and Generative AI – New NZ Law Society guidance released

Facing the future – A biometrics code of practice for New Zealand?

Deepfakes and style mimicking – Should New Zealand adopt a right of publicity?

Five Eyes release the Five Principles to Secure Innovation

The copyright conundrum with generative AI

Innovate at the speed of trust – Privacy Commissioner releases new guidance on artificial intelligence tools

Political advertising on social media: sludge or copyright quagmire?

Privacy Amendment Bill introduced to Parliament

New Data Privacy Framework: Meta gets a lifeline

The long and winding road to royalties

Implications of the Supreme Court’s “new debt” approach in Mainzeal

EU gets closer to AI laws

UK Supreme Court puts Quincecare ‘duty’ back in its box

A Deep Dive into The Customer and Product Data Bill

Searching for a shield: Meta’s €1.2 billion fine and international transfers in the age of Big Data

New NZ-UK Free Trade Agreement signals tech, media and IP law changes

Ditch the fax! Tips for building a tech-savvy law firm

The Incorporated Societies Act 2022 – what you need to know for your society

Common myths about copyright online

Artificial artist, or artificial plagiarist?

Big boost to gaming

Is your product “AI powered”?

The latest on New Zealand’s Consumer Data Right

Space Law in New Zealand

You Cannot Defame the Dead or Can You? Tikanga Māori and NZ Defamation Law

Open Banking is coming – through the Consumer Data Right

Massive SEC Fines for Companies Using Text and Instant Messaging

One Act to Rule Them All

A Legal Guide to Kicking SaaS

Potential changes to the Privacy Act 2020

NZ's Social Media "Code of Practice" Launched

Are you being unfair?

A new Companies Office levy is one step closer

Has Paramount Pictures gone maverick?

From Russia with love: The ‘other’ Russian conflict targeting intellectual property owners

Retail Payment System Act 2022 now in force

Paying the price for getting privacy wrong

Can AI be an inventor?

Finfluencer Crackdown

TIN Fintech Insights Report Launch

Britain seeks to regulate 'Big Tech'

Disclosure of personal information - how to, not don't do

The Spice May Flow, But The Copyright Doesn’t

Sound Recording Ownership (Taylor's Version)

The Lowdown (and Lockdown) on Summer Clerkships

Building Blocks of Trust

Firm News | Legal Rankings

Buy Now, Regulate Soon

Ten simple things

Funding the Future

Cyber Security for Start-ups

Fit for purchase

The Screen Industry Workers Bill

UK/New Zealand Trade Deal Takes Flight

Palmer v Alalääkkölä

Other articles you
might like

The four Cs of successful fintech partnerships
2
April 2026

Negotiating a fintech partnership agreement is not a zero sum game.

Andrew Dentice

Partner

New rule 3A introduced to the Biometric Processing Privacy Code
1
April 2026

New rule 3A means individuals must be notified about indirect collection under the Biometric Processing Privacy Code 2025.

Kyra Vince

Special Counsel – Knowledge

Anchali Anandanayagam

Partner

Open banking launches in New Zealand
2
December 2025

The official commencement of open banking in New Zealand is a significant milestone for the local industry.

Andrew Dentice

Partner

Kyra Vince

Special Counsel – Knowledge