Open banking launches in New Zealand
The official commencement of open banking in New Zealand is a significant milestone for the local industry.
%20(2).jpg)
Open banking is now live in New Zealand for personal internet banking customers.
This marks the official commencement of the Consumer Data Right regime in this country, along with the start of a new role for the Ministry of Business, Innovation and Employment (MBIE) as the regulator for open banking.
As we have written about before, only specific personal internet banking platforms offered by ANZ, ASB, BNZ and Westpac needed to be ready to meet the new requirements for their customers by 1 December 2025. This is the first step in what MBIE is calling a “phased rollout” of open banking.
There have been a number of new CDR developments now announced by MBIE.
Register of Participants
The Register of Participants – the official list of organisations included in the CDR framework – is now live on MBIE’s website. The Register will be updated to include information about both data holders and accredited requestors.
Accreditation
Organisations can now apply to MBIE to become an accredited data requestor for open banking via MBIE’s website.
Detailed accreditation guidelines have been published by MBIE. These guidelines confirm the criteria for becoming accredited and the documentary evidence that will need to be provided in support of an application. The question of what additional requirements will be imposed on those acting as intermediaries has been left somewhat open-ended in the guidelines:
Intermediaries
Additional requirements are imposed on those acting as an intermediary (i.e. those wanting to make requests under section 15 and/or section 19 of the Act). Primarily these requirements are for ensuring adequate due diligence measures are in place for engaging with 4th parties to whom data requests will be fulfilled. Evidence is required for the Accreditor to be satisfied that appropriate measures are in place.
Initially, MBIE will process accreditation applications in tranches based on the number of existing data-sharing bilateral agreements the data requestors have in place with banks under Payments NZ’s API Centre programme:
1. Applicants with four bilateral arrangements (i.e. with every mandated bank).
2. Applicants with multiple bilaterals.
3. Applicants with one bilateral.
4. Applicants without any bilaterals.
After the “initial wave of applications” has been processed, MBIE says it aims to maintain a 20-day service level for processing standard accreditation requests.
Consumer Data Right Accredited Requestor logo
Accredited data requestors will use an official accreditation trust mark to help consumers know they are dealing with a trusted participant.
Data holders
Data holders that want to opt in to the CDR framework can also contact MBIE through its website. For open banking, the five major banks have been nominated to be designated data holders. Other deposit takers can volunteer to be a data holder by notifying MBIE.
Fees and levies
Customer and Product Data (Fees) Regulations 2025 have now been issued to give effect to the fees and levies that will fund the operation of the CDR framework, including accreditation, compliance and oversight. These fees and levies had already been signposted by MBIE on its website.
Open banking standards
MBIE has also now confirmed that it has entered into a standards licensing agreement with Payments NZ. This agreement permits MBIE to incorporate by reference the Payments NZ API Centre’s v2.3.3 API standards for data, account information, payments, and API security, as well as the Customer Standard v1.1 – which was expected. However, there has been no confirmation at this time that Payments NZ’s API Centre will be designated as an approved third party standards body to manage and support the technical standards. Reliance on standards already implemented and used by industry has been a crucial element in meeting the ambitious 1 December deadline.
MBIE has confirmed that it will continue to work closely with industry over the coming months to provide further guidance and to “refine processes as the regime matures”. It says it will also expand its website throughout 2026 to include more consumer education.
The official launch of open banking in New Zealand is a significant milestone for the local industry. If your business needs advice on the CDR regime, feel free to reach out to our team.
Services in this insight
From Hertzian waves to hyperlinks – What the BSA’s online decision means for your business
Space Law in New Zealand — Signals from the ground
Cyber security changes flagged for New Zealand
The four Cs of successful fintech partnerships
New rule 3A introduced to the Biometric Processing Privacy Code
IPP3A is nearly in force – What agencies need to know
OPC shifts public enquiries online – What agencies should do now
AI as a confidante? Legal privilege and the ever-increasing use of AI
New Therapeutic and Health Advertising Code – What you need to know
Building blocks of trade mark law: New Zealand approach to "use as a trade mark" now compatible with Australia
Consumer law update 2025
Open banking launches in New Zealand
Is fair something to fear? The Government announces beefed-up Fair Trading Act
Is it fair? Lessons from Bartz v Anthropic and Kadrey v Meta
Open banking almost live
Why New Zealand businesses should care about the EU Data Act
Product labelling changes flagged for New Zealand
Biometric Processing Privacy Code 2025 introduced to New Zealand
Open banking regulations released for consultation
Ten tips for buy-side M&A success
A recipe for disaster – Is caramel a copyright work?
Becoming a Globally Renowned Fintech Nation (and how regulation can light the path)
Important changes made to the Privacy Act
New Zealand may ban social media for young users
Customer and Product Data Act update – Open banking officially on the way
Tips from the trenches – Your AI policy cheat sheet
Significant regulatory reform proposed for New Zealand media
Security guidance released for emerging tech companies
Customer and Product Data Bill – Select Committee reports back
Consumer law update 2024
New Zealand’s Artist Resale Royalty is ready to go
The shape of coffee – “Moccona” vs “Vittoria”
New Zealand’s Copyright Act gets a sense of humour
WIPO’s traditional knowledge treaty is adopted
Doing business in the Middle East
AI and advertising – What producers need to know
Seven contract clauses every freelancer needs
Baby Reindeer – When truth is stranger than fiction?
Our comments on the Biometric Processing Privacy Code
Therapeutic Products Act to be repealed this year
Is End-to-End to end?
Geographical indications – Changes uncorked by the EU-NZ Fair Trade Agreement
Lawyers and Generative AI – New NZ Law Society guidance released
Facing the future – A biometrics code of practice for New Zealand?
Deepfakes and style mimicking – Should New Zealand adopt a right of publicity?
Five Eyes release the Five Principles to Secure Innovation
The copyright conundrum with generative AI
Innovate at the speed of trust – Privacy Commissioner releases new guidance on artificial intelligence tools
Political advertising on social media: sludge or copyright quagmire?
Privacy Amendment Bill introduced to Parliament
New Data Privacy Framework: Meta gets a lifeline
The long and winding road to royalties
Implications of the Supreme Court’s “new debt” approach in Mainzeal
EU gets closer to AI laws
UK Supreme Court puts Quincecare ‘duty’ back in its box
A Deep Dive into The Customer and Product Data Bill
Searching for a shield: Meta’s €1.2 billion fine and international transfers in the age of Big Data
New NZ-UK Free Trade Agreement signals tech, media and IP law changes
Ditch the fax! Tips for building a tech-savvy law firm
The Incorporated Societies Act 2022 – what you need to know for your society
Common myths about copyright online
Artificial artist, or artificial plagiarist?
Big boost to gaming
Is your product “AI powered”?
The latest on New Zealand’s Consumer Data Right
Space Law in New Zealand
You Cannot Defame the Dead or Can You? Tikanga Māori and NZ Defamation Law
Open Banking is coming – through the Consumer Data Right
Massive SEC Fines for Companies Using Text and Instant Messaging
One Act to Rule Them All
A Legal Guide to Kicking SaaS
Potential changes to the Privacy Act 2020
NZ's Social Media "Code of Practice" Launched
Are you being unfair?
Are you legal?
Power Up 2022
A new Companies Office levy is one step closer
Has Paramount Pictures gone maverick?
From Russia with love: The ‘other’ Russian conflict targeting intellectual property owners
I'm back, baby
Retail Payment System Act 2022 now in force
Paying the price for getting privacy wrong
Can AI be an inventor?
Finfluencer Crackdown
TIN Fintech Insights Report Launch
Britain seeks to regulate 'Big Tech'
Disclosure of personal information - how to, not don't do
The Spice May Flow, But The Copyright Doesn’t
Sound Recording Ownership (Taylor's Version)
The Lowdown (and Lockdown) on Summer Clerkships
Building Blocks of Trust
Firm News | Legal Rankings
Buy Now, Regulate Soon
Ten simple things
Funding the Future
Cyber Security for Start-ups
Fit for purchase
The Screen Industry Workers Bill
UK/New Zealand Trade Deal Takes Flight
Palmer v Alalääkkölä
Other articles you
might like
Negotiating a fintech partnership agreement is not a zero sum game.
New rule 3A means individuals must be notified about indirect collection under the Biometric Processing Privacy Code 2025.
The European Commission has now adopted an adequacy decision for an EU-US Data Privacy Framework, adding a new twist to an ongoing tale.







.jpg)





.jpeg)