Open banking launches in New Zealand

The official commencement of open banking in New Zealand is a significant milestone for the local industry.

Open banking launches in New ZealandOpen banking launches in New Zealand
Category
Insight | Tech
Insight
|
Tech
Published Date
2
December 2025
Reading Time

Open banking is now live in New Zealand for personal internet banking customers.

This marks the official commencement of the Consumer Data Right regime in this country, along with the start of a new role for the Ministry of Business, Innovation and Employment (MBIE) as the regulator for open banking.

As we have written about before, only specific personal internet banking platforms offered by ANZ, ASB, BNZ and Westpac needed to be ready to meet the new requirements for their customers by 1 December 2025. This is the first step in what MBIE is calling a “phased rollout” of open banking.

There have been a number of new CDR developments now announced by MBIE.

Register of Participants

The Register of Participants – the official list of organisations included in the CDR framework – is now live on MBIE’s website. The Register will be updated to include information about both data holders and accredited requestors.

Accreditation

Organisations can now apply to MBIE to become an accredited data requestor for open banking via MBIE’s website.

Detailed accreditation guidelines have been published by MBIE. These guidelines confirm the criteria for becoming accredited and the documentary evidence that will need to be provided in support of an application. The question of what additional requirements will be imposed on those acting as intermediaries has been left somewhat open-ended in the guidelines:

Intermediaries
Additional requirements are imposed on those acting as an intermediary (i.e. those wanting to make requests under section 15 and/or section 19 of the Act). Primarily these requirements are for ensuring adequate due diligence measures are in place for engaging with 4th parties to whom data requests will be fulfilled. Evidence is required for the Accreditor to be satisfied that appropriate measures are in place.

Initially, MBIE will process accreditation applications in tranches based on the number of existing data-sharing bilateral agreements the data requestors have in place with banks under Payments NZ’s API Centre programme:

1. Applicants with four bilateral arrangements (i.e. with every mandated bank).

2. Applicants with multiple bilaterals.

3. Applicants with one bilateral.

4. Applicants without any bilaterals.

After the “initial wave of applications” has been processed, MBIE says it aims to maintain a 20-day service level for processing standard accreditation requests.

Consumer Data Right Accredited Requestor logo

Accredited data requestors will use an official accreditation trust mark to help consumers know they are dealing with a trusted participant.

Data holders

Data holders that want to opt in to the CDR framework can also contact MBIE through its website. For open banking, the five major banks have been nominated to be designated data holders. Other deposit takers can volunteer to be a data holder by notifying MBIE.

Fees and levies

Customer and Product Data (Fees) Regulations 2025 have now been issued to give effect to the fees and levies that will fund the operation of the CDR framework, including accreditation, compliance and oversight. These fees and levies had already been signposted by MBIE on its website.

Open banking standards

MBIE has also now confirmed that it has entered into a standards licensing agreement with Payments NZ. This agreement permits MBIE to incorporate by reference the Payments NZ API Centre’s v2.3.3 API standards for data, account information, payments, and API security, as well as the Customer Standard v1.1 – which was expected. However, there has been no confirmation at this time that Payments NZ’s API Centre will be designated as an approved third party standards body to manage and support the technical standards. Reliance on standards already implemented and used by industry has been a crucial element in meeting the ambitious 1 December deadline.

MBIE has confirmed that it will continue to work closely with industry over the coming months to provide further guidance and to “refine processes as the regime matures”. It says it will also expand its website throughout 2026 to include more consumer education.

The official launch of open banking in New Zealand is a significant milestone for the local industry. If your business needs advice on the CDR regime, feel free to reach out to our team.

Services in this insight

Technology & Telecommunications

Navigate innovation, risk and opportunity with commercially focused guidance.

Regulatory Advice

Innovate and grow without tripping over compliance.

Services in this insight

Technology & Telecommunications

Navigate innovation, risk and opportunity with commercially focused guidance.

Regulatory Advice

Innovate and grow without tripping over compliance.

Services in this insight

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore.

Technology & Telecommunications

Navigate innovation, risk and opportunity with commercially focused guidance.

Regulatory Advice

Innovate and grow without tripping over compliance.

Previous Article
Next Article

From Hertzian waves to hyperlinks – What the BSA’s online decision means for your business

Space Law in New Zealand — Signals from the ground

Cyber security changes flagged for New Zealand

The four Cs of successful fintech partnerships

New rule 3A introduced to the Biometric Processing Privacy Code

IPP3A is nearly in force – What agencies need to know

OPC shifts public enquiries online – What agencies should do now

AI as a confidante? Legal privilege and the ever-increasing use of AI

New Therapeutic and Health Advertising Code – What you need to know

Building blocks of trade mark law: New Zealand approach to "use as a trade mark" now compatible with Australia

Consumer law update 2025

Open banking launches in New Zealand

Is fair something to fear? The Government announces beefed-up Fair Trading Act

Is it fair? Lessons from Bartz v Anthropic and Kadrey v Meta

Open banking almost live

Why New Zealand businesses should care about the EU Data Act

Product labelling changes flagged for New Zealand

Biometric Processing Privacy Code 2025 introduced to New Zealand

Open banking regulations released for consultation

Ten tips for buy-side M&A success

A recipe for disaster – Is caramel a copyright work?

Becoming a Globally Renowned Fintech Nation (and how regulation can light the path)

Important changes made to the Privacy Act

New Zealand may ban social media for young users

Customer and Product Data Act update – Open banking officially on the way

Tips from the trenches – Your AI policy cheat sheet

Significant regulatory reform proposed for New Zealand media

Security guidance released for emerging tech companies

Customer and Product Data Bill – Select Committee reports back

Consumer law update 2024

New Zealand’s Artist Resale Royalty is ready to go

The shape of coffee – “Moccona” vs “Vittoria”

New Zealand’s Copyright Act gets a sense of humour

WIPO’s traditional knowledge treaty is adopted

Doing business in the Middle East

AI and advertising – What producers need to know

Seven contract clauses every freelancer needs

Baby Reindeer – When truth is stranger than fiction?

Our comments on the Biometric Processing Privacy Code

Therapeutic Products Act to be repealed this year

Is End-to-End to end?

Geographical indications – Changes uncorked by the EU-NZ Fair Trade Agreement

Lawyers and Generative AI – New NZ Law Society guidance released

Facing the future – A biometrics code of practice for New Zealand?

Deepfakes and style mimicking – Should New Zealand adopt a right of publicity?

Five Eyes release the Five Principles to Secure Innovation

The copyright conundrum with generative AI

Innovate at the speed of trust – Privacy Commissioner releases new guidance on artificial intelligence tools

Political advertising on social media: sludge or copyright quagmire?

Privacy Amendment Bill introduced to Parliament

New Data Privacy Framework: Meta gets a lifeline

The long and winding road to royalties

Implications of the Supreme Court’s “new debt” approach in Mainzeal

EU gets closer to AI laws

UK Supreme Court puts Quincecare ‘duty’ back in its box

A Deep Dive into The Customer and Product Data Bill

Searching for a shield: Meta’s €1.2 billion fine and international transfers in the age of Big Data

New NZ-UK Free Trade Agreement signals tech, media and IP law changes

Ditch the fax! Tips for building a tech-savvy law firm

The Incorporated Societies Act 2022 – what you need to know for your society

Common myths about copyright online

Artificial artist, or artificial plagiarist?

Big boost to gaming

Is your product “AI powered”?

The latest on New Zealand’s Consumer Data Right

Space Law in New Zealand

You Cannot Defame the Dead or Can You? Tikanga Māori and NZ Defamation Law

Open Banking is coming – through the Consumer Data Right

Massive SEC Fines for Companies Using Text and Instant Messaging

One Act to Rule Them All

A Legal Guide to Kicking SaaS

Potential changes to the Privacy Act 2020

NZ's Social Media "Code of Practice" Launched

Are you being unfair?

A new Companies Office levy is one step closer

Has Paramount Pictures gone maverick?

From Russia with love: The ‘other’ Russian conflict targeting intellectual property owners

Retail Payment System Act 2022 now in force

Paying the price for getting privacy wrong

Can AI be an inventor?

Finfluencer Crackdown

TIN Fintech Insights Report Launch

Britain seeks to regulate 'Big Tech'

Disclosure of personal information - how to, not don't do

The Spice May Flow, But The Copyright Doesn’t

Sound Recording Ownership (Taylor's Version)

The Lowdown (and Lockdown) on Summer Clerkships

Building Blocks of Trust

Firm News | Legal Rankings

Buy Now, Regulate Soon

Ten simple things

Funding the Future

Cyber Security for Start-ups

Fit for purchase

The Screen Industry Workers Bill

UK/New Zealand Trade Deal Takes Flight

Palmer v Alalääkkölä

Other articles you
might like

The four Cs of successful fintech partnerships
2
April 2026

Negotiating a fintech partnership agreement is not a zero sum game.

Andrew Dentice

Partner

New rule 3A introduced to the Biometric Processing Privacy Code
1
April 2026

New rule 3A means individuals must be notified about indirect collection under the Biometric Processing Privacy Code 2025.

Kyra Vince

Special Counsel – Knowledge

Anchali Anandanayagam

Partner

New Data Privacy Framework: Meta gets a lifeline
1
September 2023

The European Commission has now adopted an adequacy decision for an EU-US Data Privacy Framework, adding a new twist to an ongoing tale.

Andrew Dentice

Partner