The Australian government has introduced a Consumer Data Right (CDR) giving consumers greater control over their data. Part of this right requires the creation of common technical standards making it easier and safer for consumers to access data held about them by businesses, and – if they choose to – share this data via application programming interfaces (APIs) with trusted, accredited third parties.
The Data Standards Body (DSB) has been established by the Australian Government to deliver open standards that support the CDR. These standards consist of technical standards and CX standards. The Technical Standards (CDS) specify standards such as REST APIs, data schemas and security measures, to be implemented and used by Data Holders and Accredited Data Recipients participating in the CDR.
The CX Standards specify requirements and provisions for consumer-facing content and interactions, such as data language, authentication, and accessibility. The CX Guidelines provide examples of how to implement key requirements and recommendations, covering areas such as providing consent for data sharing.
The DSB is responsible for assisting Mr Andrew Stevens, the Data Standards Chair, in the development of common technical standards to allow Australians to access data held about them by businesses and direct its safe transfer to others.
The work of standards development is conducted in close consultation with the Australian Competition and Consumer Commission (ACCC) as lead regulator of the Consumer Data Right, supported by the Office of the Australian Information Commissioner (OAIC).
The Consumer Data Right is intended to apply sector by sector across the whole economy, beginning in the banking sector. The next step for Consumer Data Right is in the energy and telecommunications sectors with other sectors to follow.
Working groups have been established to support the DSB in designing and testing the open standards it develops. Input provided by the Advisory Committees and working groups, alongside draft guidance materials, API specifications and implementation materials are being shared on this website and on GitHub.