Open banking and the Consumer Data Right

The Consumer Data Right (CDR) allows eligible customers to conveniently access their banking data and share it with accredited third parties. In the banking sector, this is also called Open Banking.

You can choose if you want to share your consumer data with accredited third parties, and which third parties you wish to share that data with. Please see below for instructions on how to do this.

You will not be charged a fee to disclose any required consumer data.

Please see the CDR website for more information about how CDR works.
 

What is consumer data?

We're required to make specific types of consumer data available under the CDR regime, including:

• Customer information such as your name and contact details (phone number, email address and residential address). If you're a business, this also includes information about your business such as your business name and ABN.
• Account details such as your account name, account number, account balance and any authorisations on the account (i.e. direct debits, scheduled payments and payee details).
• Transaction information such as the date of transactions, amount credited or debited and simple categorisation of the transaction (e.g. whether the transaction is a fee or interest).
• Product specific data such as the product type, price (including fees, charges and interest rates) and associated features and benefits (including discounts and bundles).

Only eligible CDR consumers are permitted to share consumer data. 
 

Individual/sole traders

A person is an eligible CDR consumer if they:

• are 18 years of age or older; and
• hold an eligible Macquarie Personal Banking Product that can be accessed via Macquarie Electronic Banking.

Joint accounts

Joint account holders with two or more individual account holders are eligible to share consumer data if:

•  each account holder is 18 years of age or older; and
• an eligible Macquarie Personal Banking Product is held that can be accessed via Macquarie Electronic Banking.

The default setting for joint accounts (where each joint account holder is an eligible CDR consumer) is that either account holder is eligible to consent to the disclosure of CDR data. This means that any joint account holder can initiate or stop the sharing of CDR data from a joint account without further approval from other account holders. 

Any joint account holder can also independently disable the account from data sharing altogether. Once an account is disabled:

• account holders will not be allowed to enter into any new data sharing arrangements;
• any existing data sharing arrangements will be paused; and
• the consent of all joint account holders will be required to re-enable data sharing.

If you’d like to change these default settings, you can manage your CDR disclosure preferences online either at Macquarie Online Banking or Macquarie Mobile Banking.
 

For Macquarie Mobile Banking app:

1. Select the account you would like to manage disclosure options for from the Accounts screen
2. From the ‘I want to…’ dropdown select ‘View account details’
3. In Account summary select the Manage tool next to CDR disclosure option
4. On the next screen select Change
5. If changing to the:
   • non-disclosure option (i.e. if you would like to independently disable the account from data sharing altogether), this action is now complete
   • pre-approval option (i.e. if you would like to re-enable the account for data sharing), all other joint account holders will need to log in and navigate to the same Account details screen and select Review next to CDR disclosure option. Once all account holders have approved this change to the pre-approval option, data sharing will be restarted for active data sharing arrangements on selected account.

For Macquarie Online Banking:

1. Select the account you would like to manage disclosure options for from the Accounts side menu
2. From the ‘I want to…’ dropdown select ‘View account details’
3. In Account summary select the Manage tool next to CDR disclosure option
4. On the next screen select Change
5. If changing to the:
   • non-disclosure option (i.e. if you would like to independently disable the account from data sharing altogether), this action is now complete
   • pre-approval option (i.e. if you would like to re-enable the account for data sharing), all other joint account holders will need to log in and navigate to the same Account details screen and select Review next to CDR disclosure option. Once all account holders have approved this change to the pre-approval option, data sharing will be restarted for active data sharing arrangements on selected account.
      

Business/entity customers

A business/ entity customer (e.g. a company, trust or partnership customer) is an eligible CDR consumer if:

• It’s an account holder for an eligible Macquarie Personal Banking Product; and
• It has at least one nominated representative appointed for the relevant account - see how to appoint a nominated representative section below.
   

Secondary users

An individual CDR consumer who is an account holder can nominate another person to be a secondary user. As a secondary user, that person can authorise data sharing from the individual CDR consumer’s account on their behalf.

Please refer to the How to appoint or revoke a CDR secondary user section for more information.

Eligible account holders can instruct us to share consumer data for the following products that are issued by Macquarie Bank:  

• Aussie Home Loans branded Home Loan and Offset/ Transaction Account(s)
• Bell Potter Cash Management Service Account
• Macquarie Basic Home Loan (loans with BSB starting with 182)
• Macquarie Black Credit Card
• Macquarie Business Savings Account
• Macquarie Car Loan
• Macquarie Cash Management Account (CMA)
• Macquarie CMA Accelerator
• Macquarie Line of Credit
• Macquarie Offset Home Loan (loans with BSB starting with 182)
• Macquarie Offset Account
• Macquarie Platinum Credit Card
• Macquarie Ratesaver Credit Card
• Macquarie Savings Account
• Macquarie Term Deposit
• Macquarie Transaction Account.

A list of current Macquarie Business Banking products that are eligible for consumer data sharing is available in the article Open Banking and the Consumer Data Right.

Exempt products

The Australian Competition and Consumer Commission (ACCC) has granted Macquarie Bank a permanent exemption for product portfolios we no longer publicly offer as per paragraph 2b of the Exemption. 

We also had a temporary exemption in place for products listed in paragraph 2a of the Exemption which are now supported through Business Banking.

If you’re eligible for consumer data sharing, you can contact us on live chat to assist if you would like to allow an accredited data recipient to access your consumer data.

If you’re eligible for consumer data sharing and hold an eligible Macquarie Personal Banking Product in the name of:

• an individual or sole trader - you can share consumer data for your account(s) without appointing a nominated representative; or
• a company, trust or partnership (Entity) - you’ll first need to appoint a nominated representative (see How to appoint a nominated representative section). Once appointed, the nominated representative can then follow the below steps to start sharing data on behalf of the Entity.

To share consumer data:

First, you’ll need to initiate the data sharing process by going to the accredited data recipient you want to share your consumer data with.

You can then select Macquarie Bank and you will be redirected to us so we can:

1. Authenticate it’s you using your Macquarie ID
2. Send you a One-Time Password (OTP) via Macquarie Authenticator or SMS
3. Allow you to select the accounts you’d like to share consumer data for (if applicable)
4. Obtain your authorisation before we disclose your nominated consumer data.

Please note, we’ll never ask you to give your Macquarie login and password to an accredited data recipient for consumer data to be shared.

If you’re having trouble connecting your Macquarie accounts to an accredited data recipient, get in touch with a Macquarie consultant using  live chat. If your call relates to a Macquarie Business Savings Account please call us on 1800 620 673.

To share consumer data from your company, trust or partnership (Entity) account, you’ll need to first appoint a nominated representative. A nominated representative is a person that is appointed to give, amend and manage authorisations to share consumer data from (and on behalf of) your Entity’s accounts with accredited data recipients.

You can appoint a nominated representative by completing the CDR Nominated Representative Authority form. The form can also be used to revoke a nominated representative that you’ve appointed in the past.

To appoint or revoke more than one nominated representative, you’ll need to complete a separate form for each nominated representative.

If you need assistance appointing or revoking a nominated representative, you can get in touch with one of our consultants using live chat.

Please note, revoking a nominated representative only removes their authority to share CDR data - it does not remove their existing access to the Entity’s accounts via Macquarie Online/Mobile Banking. To have this access removed, please get it touch with us using live chat.

Accounts that are held by an individual (or multiple individuals e.g. joint accounts) can be enabled to allow a third party (secondary user) to share consumer data from the relevant account with accredited data recipients.
 

Who can appoint a secondary user?

An eligible individual CDR consumer who is an account holder can appoint or remove a secondary user.
 

Who can be appointed as a secondary user?

A secondary user must:

• be an individual that is 18 years or older;
• have access to Macquarie Electronic Banking;
• have the ability to transact on the relevant eligible Macquarie Personal Banking Product; and
• have secondary user permissions enabled by the account holder.

To appoint, remove or manage secondary users for a particular account, any account holder can follow the below steps in Macquarie Mobile Banking app and Macquarie Online Banking.

For Macquarie Mobile Banking app:

1. Select the account you would like to manage secondary users for from the Accounts screen
2. From the ‘I want to…’ dropdown select ‘View account details’ 
3. In Account summary select the Manage tool next to CDR Secondary Sharing
4. Select Manage next to the secondary users name
5. Select Enable or Disable sharing to update data sharing permissions

For Macquarie Online Banking:

1. Select the account you would like to manage secondary users for from the Accounts side menu
2. From the ‘I want to…’ dropdown select ‘View account details’
3. In Account summary select the Manage tool next to CDR Secondary Sharing
4. Select Manage next to the secondary users name
5. Select Change to update data sharing permissions

If you need assistance appointing or removing a secondary user, you can get in touch with a Macquarie consultant using live chat.

You can view your current arrangements to share consumer data through the Macquarie Mobile Banking app and Macquarie Online Banking.

For Macquarie Mobile Banking app:

1. Select the menu icon 
2. Select Security
3. Select Other options
4. Select Connected third-party providers.

For Macquarie Online Banking:

1. Click on the  menu  icon in top left-hand corner to display the side menu
2. Select the settings  icon
3. Select Security settings
4. Select Manage under My connected third-party providers.

If you want to stop sharing your consumer data with an accredited data recipient, you can do so through the Macquarie Mobile Banking app and Macquarie Online Banking.

For Macquarie Mobile Banking app:

1. Select the menu icon
2. Select Security
3. Select Other options
4. Select the accredited data recipient under Connected third-party providers
5. Select stop sharing and confirm to stop sharing now.

For Macquarie Online Banking:

1. Click on the menu icon in top left-hand corner to display the side menu
2. Select the settings  icon
3. Select Security settings
4. Select Manage next to the accredited data recipient under My connected third-party providers
5. Select stop sharing and confirm to stop sharing now.

You can also get in touch with a Macquarie associate using live chat to assist with withdrawing your authorisation to share your consumer data with an accredited data recipient.

It’s important to know that when you ask us to stop sharing your data with an accredited data recipient, they’re required to either delete or de-identify your consumer data when it is no longer required. We recommend you refer to the terms and the CDR Policy of the accredited data recipient to determine how they’ll handle your data once it’s no longer required.

If you notice any of your consumer data shared with an accredited data recipient is incorrect, please get in touch with a Macquarie associate using live chat.

Once we’ve reviewed, you’ll receive an email from us outlining:

• what has changed
• if the consumer data wasn’t updated, why we didn’t consider it necessary to do so, and
• the complaint mechanisms available to you.

We’re committed to ensuring your data is kept safe, including under Open Banking.

Data recipients must be accredited with the Australian Competition and Consumer Commission (ACCC) and comply with various privacy safeguards and security controls under the Consumer Data Right (CDR) legislation, rules and standards. Please note, we’ll never ask you to give your Macquarie login and password to an accredited data recipient for consumer data to be shared.

There may be circumstances where we refuse to ask for an authorisation in relation to a consumer data sharing request or may suspend or revoke any or all access to the sharing of your consumer data with an accredited data recipient including where:

• the accredited data recipient has lost their accreditation under the CDR
• we consider it necessary to prevent physical or financial harm or abuse;
• we’re required by law or court order or requested by any regulatory body, law enforcement or other government agency; or
• we determine there is another reasonable cause, including those related to compliance, technical or security issues to protect our Open Banking service.

You can request copies of records for the following: 

• Authorisations given by you to disclose consumer data.
• Any amendments to or revocations of an authorisation to disclose consumer data.
• Where Macquarie Bank has disclosed CDR data in response to consumer data requests from accredited data recipients you have authorised.
• Any CDR complaint data in relation to CDR that you have raised directly with us.

To request a copy of these records, please get in touch with a Macquarie consultant using live chat.

Under the Consumer Data Right (CDR) regime, banks are required to make available Product Reference Data about certain specified products they publicly offer. This includes information such as interest rates, fees, charges and eligibility criteria.

Product Reference Data is currently available for the following Personal Banking products:

• Macquarie Basic Home Loan (loans with BSB starting with 182)
• Macquarie Black Credit Card
• Macquarie Business Savings Account
• Macquarie Car Loan
• Macquarie Cash Management Account (CMA)
• Macquarie CMA Accelerator
• Macquarie Offset Home Loan (loans with BSB starting with 182)
• Macquarie Platinum Credit Card
• Macquarie Ratesaver Credit Card
• Macquarie Savings Account
• Macquarie Term Deposit
• Macquarie Transaction Account.

The current Product Reference Data for Macquarie Business Banking products is available.

You can find information on how to access Product Reference Data on our developer website, devXchange.

Currently, we have no further actions remaining with a rectification date. See a full schedule of all implementation gaps listed within the CDR regime at ACCC’s Rectification Schedule.

If you have any questions about Macquarie Bank’s Open Banking service, please get in touch with a Macquarie consultant using live chat.