New Zealand's long-anticipated Consumer Data Right (CDR) regime, enabling open banking, officially launched on March 31, 2026. The framework allows consumers to securely share their banking data with accredited third parties to access new financial products and services, aiming to increase competition and innovation.
The launch follows a phased implementation, with the four major banks—ANZ, ASB, BNZ, and Westpac—required to be ready from day one. Payments NZ, which operates the country's core payment systems, is managing the technical standards and security accreditation for participants.
Experts have highlighted that the shift to open banking amplifies existing concerns about data security, privacy, and the ethical use of artificial intelligence. The increased flow of sensitive financial data creates a larger attack surface and raises questions about algorithmic bias, transparency, and accountability in automated financial decision-making.
The government has stated that the CDR includes privacy safeguards and that the Ministry of Business, Innovation and Employment (MBIE) will oversee the regime's expansion to the energy and telecommunications sectors in the future.
