-
Business
- Support for business
- Consumer Data Right
- Financial markets conduct regulation
- Competition regulation and policy
-
Regulating entities
- Du Val statutory management
- Companies Act reforms
- Incorporated Societies Act 2022
- Our work with the PCO
- Financial Reporting Act 2013
- Insolvency Review Working Group
- Supporting the integrity of the corporate governance system
- Changes to the Takeovers Code
- Historic reform of corporate law
- Mandatory climate-related disclosures
- The Business Payment Practices Act 2023 has been repealed
- Review of New Zealand Companies Office Fees and Levies (2025)
- Standards and conformance
- Trade and tariffs
-
Intellectual property
- Copyright
- Haka Ka Mate Attribution Act guidelines
- Designs
- Geographical indications
- Plant variety rights
- Integrated circuit design protection
- Intellectual property enforcement
- Mātauranga and Taonga Māori and the Intellectual Property System
- Disclosure of origin requirements in the patents regime
- Proposed Intellectual Property Laws Amendment Bill
- The Trans-Tasman patent attorney registration regime
- business.govt.nz
- Trans-Tasman Mutual Recognition Arrangement (TTMRA)
Who to contact about Consumer Data Right
Find out who to contact, when to contact us and how we can help.
On this page
The Consumer Data Right (CDR) framework is now live in Aotearoa New Zealand under the Customer and Product Data Act 2025 and its regulations. Currently, only the banking sector is designated, but more sectors will follow.
MBIE and the Office of the Privacy Commissioner – working together
Whilst the CDR is enabled by the Customer and Product Data Act 2025, as with all activity, organisations must also fulfil their obligations under the Privacy Act 2020. The CDR specifies how organisations must meet their storage and security obligations under the Privacy Act, and how organisations should treat requests for customer data, which can include personal information.
The Ministry of Business, Innovation and Employment (MBIE) is responsible for sector designation, accreditation of data recipients and oversight of regulated data services. The Office of the Privacy Commissioner (OPC) regulates breaches of the CDR regime that involve personal information.
We work closely together to monitor compliance, support participants, and take action if any rules are broken.
How we can help
Email the CDR team if you:
- have questions about how CDR works,
- want to share ideas or suggestions,
- have contacted a participant and still need support.
If you have a concern about Customer Data Right participation
If you are a customer, data holder, accredited requestor, or a future participant, here is a checklist that will guide you to the right information and contacts.
Follow these steps:
- Check if the organisation is a participant – see our Register of Participants.
- If they are a participant contact them first about your concerns: their complaints process is listed in the Register of Participants.
- If they are not a participant but claim CDR involvement: email our CDR team and share your experience.
Contact the organisation first
Under the Act, participants must have a clear, fair and effective complaints process. They should have information about their complaints process easily accessible for people.
Customers must contact the organisations they have a concern with to raise their concerns directly.
Contacting them first:
- gives them a chance to clarify any misunderstanding and/or address the problem quickly,
- keeps the process simple,
- ensures compliance with the Act.
If you still need help because you have not heard back within a reasonable time, or you feel the response is not acceptable, you can contact us.
Provide us with the details of your previous contact so we know the participant has been made aware, can understand what has been exchanged between you and the participant, and can assist you knowledgably.
If your issue relates to personal information, we will share this with the Office of the Privacy Commissioner (OPC). You can also contact OPC directly.
Contact the OPC(external link) — Office of the Privacy Commissioner
Feedback or suggestions
We welcome feedback from anyone interested in Consumer Data Right.
To share suggestions or ideas, email our CDR team.
Join our mailing list
If you want to get updates about regulations and standards related to the CDR, email us to join our mailing list.