Overview
New Zealand's Consumer Data Right (CDR) formalises open banking following industry-led development by Payments NZ and the API Centre. From 1 December 2025, bank data portability is a legal requirement under the Customer and Product Data Act 2025: the four largest banks (ANZ, ASB, BNZ, Westpac) must support data sharing with explicit customer authorisation. Kiwibank has a phased schedule—payment services by 1 June 2026, other open banking services by 1 December 2026. Data may only be shared with accredited data requestors; MBIE runs accreditation and issues a trust mark. The framework will expand to electricity and telecommunications in later phases.
Scope & Coverage
Key Requirements
Implementation Timeline
Key Notes
Regulations in force from 1 December 2025. Banks had voluntarily built open banking via Payments NZ; government followed with CDR legislation. In October 2025 alone, 100,000+ people used open banking services. Smaller providers can use accredited intermediaries.
Official Resources
Related Regulations
Other open banking frameworks in Oceania:
Need to comply with NZ CDR?
Explore API aggregators that support New Zealand compliance.