Accredited requestors

What an accredited requestor is

An accredited requestor is an organisation approved to access customer data and perform specific actions under the Consumer Data Right (CDR) framework.

What customer data and what actions an accredited requestor can do, is determined through the classes of accreditation nominated for a sector through the regulations specific to it.

For the banking sector there are 2 types:

• Non-intermediary: interacts directly with customers and requests data for its own services
• Intermediary: acts on behalf of other organisation (called “fourth parties”) to request and share data securely

Product data, which is not included for banking, is available to anyone that is able to comply with the relevant sector standards and does not require accreditation.

What an accredited requestor does

For the first sector banking, with customer authorisation, accredited requestors may:

• Request customer data: customer account and transaction information
• Instruct payment: initiate payments under a customer’s directive
• Act on behalf of other organisations: request data and initiate payments for other organisations who have their own customer’s authorisation to do so
• Provide services: use data to help customers, compare products or access new tools.

Duties for accredited requestors

Accredited requestors must:

• become accredited by MBIE
• use customer data only for the agreed purpose
• keep customer data safe and secure
• follow all rules under the Customer and Product Data Act 2025
• have clear complaints processes
• act inline with the purpose and intended outcomes of the CDR regime

Who can be accredited

Provided an organisation has a current New Zealand Business Number (NZBN), can provide all the information required for the application and pay the application fee, they can apply.

Currently, only banking is included in the CDR, so participants in the banking sector can be accredited. Service providers that want to access customer banking data or enable payment actions can apply.

In the future as other sectors are added, companies from those sectors can apply. Organisations may apply for accreditation in any sector and can hold accreditation in as many sectors as they meet the criteria for.

How to recognise an accredited requestor

To make sure you’re dealing with an accredited participant, there are 2 things to do:

1. Look for the official Consumer Data Right Accreditation trust mark
2. Check the Register of Participants: this is the official list of all data holders and accredited requestors

Check the register

View the Register of Participants to see current accredited requestors and data holders, their contact details and complaints processes.

Register of Participants

Classifications of accredited requestors

For banking, organisations can apply for one or more classifications of accreditation:

• Non-intermediary – Customer Data: request CDR data for their own customers
• Intermediary – Customer Data: request CDR data for someone else’s customers
• Non-intermediary – Payments: instruct payments for their own customers
• Intermediary – Payments: instruct payments for someone else’s customers

How to become accredited

To become accredited an application must be submitted along with required evidence for assessment by MBIE, and the relevant processing fee paid.

Assessment includes:

• Organisation and product details, including authorisation processes.
• Fit and proper person checks for the applicant including senior managers and directors.
• Product and data security evidence.
• Liability cover (insurance, guarantee, or financial resource arrangement).
• Dispute resolution and clear complaints processes.

Additional requirements for intermediaries:

• Due diligence and monitoring of fourth parties.
• Security and privacy provisions in contracts.
• Anti-Money Laundering (AML)/Know Your Customer (KYC) checks (either by requiring fourth parties to have a New Zealand bank account or by undertaking further checks).
• Data handling practices.

MBIE may request more details or consult other authorities.

If approved, you will be added to the Register of Participants and will be directed to complete onboarding with data holders before active participation.

Before you apply

If you are considering becoming an accredited requestor, make sure you understand the requirements and obligations under the Consumer Data Right (CDR).

Before starting your application:

• Contact MBIE to discuss your requirements about access to sandbox test environments.
• Read the Accreditation guidelines – the guide explains the full application process, criteria, and what evidence you will need to provide as part of your application

Download CDR Accreditation guidelines:

Ready to apply?

Now that you have read the CDR Accreditation guidelines you are ready to access the online Accredited Requestor Application Form to start the process:

Apply to become an accredited requestor(external link)

1. Login through RealMe
2. Create a Business Connect account
3. Select Business Admin - Consumer Data Right Accreditation from the dashboard

Decide carefully who in your organisation will complete the online application form. Access to the form is via a RealMe login – which can only be for individuals, not organisations. Once an application is started it will only be visible to the individual creating it.

Need help? We are here to support you

The CDR team is available to support and guide organisations through the accreditation process. We will work with you to answer questions about obligations and help you navigate the accreditation process.

Who to contact about Consumer Data Right