What is the Consumer Data Right?
The Consumer Data Right (CDR) is Australian legislation that gives the owner of data — including businesses — control over it, and a safe, regulated way to share it, via an accredited data recipient like Skript, with the services they choose. In banking, it's what makes Open Banking work.
Our Open Banking page goes into more detail, including how the CDR compares with direct bank APIs and screen scraping.
Is Skript accredited as a CDR Data Recipient?
Yes. Skript has been an Unrestricted Accredited Data Recipient (ADR) under the CDR since 2022 (accreditation ID ADRBNK2010).
“Unrestricted” is the highest level of CDR accreditation. It means Skript collects and holds bank data directly from the banks under its own accreditation, rather than sitting behind another provider’s — and it is why you don’t need any accreditation of your own.
Our accreditation is active, meaning we have live connections to the banks (“data holders”) in the CDR ecosystem.
Do I need to be accredited to access CDR data?
For business data, no. There are two ways in, and neither needs CDR accreditation on your side:
- Your own business data. A business can access its own bank data directly — that's Subskript.
- Your business customers' data, with their consent. Under the CDR's business consumer disclosure consent (BCDC) rules, a business can say “yes, share my bank data with the software I use”, and the software provider does not need any CDR accreditation — that's Superskript and Superskript Aggregator.
Skript holds the accreditation as an unrestricted Accredited Data Recipient (ADR) and collects the data with the account holder's consent. You build the product. The rule, what it asks of your customer and what accreditation would have involved are all on our accreditation explainer.
Is business consent a loophole?
No. It is a rule the government added deliberately in the Competition and Consumer (Consumer Data Right) Amendment Rules (No. 1) 2023, in force since 28 November 2023, because businesses share financial data with software and advisers as a matter of course. The ACCC’s fact sheet says the change is intended to support participation by a broader range of businesses. An accredited provider still collects the data and still carries the CDR obligations; the business simply chooses who receives it. Read the rule in full.
Does business consent cover sole traders?
Yes, if they have an active ABN. The CDR Rules treat any consumer that is not an individual, or that holds an active ABN, as a business consumer, and Skript confirms that before requesting data. A person without an ABN is an individual under the CDR, and Skript does not serve individuals’ data.
How long does a business consent last?
Two clocks run. The business’s consent to share with your product can run for up to seven years, and the rules require that a business is always offered a 12-month-or-shorter option as well. The authorisation the business gives its bank lasts up to 12 months and is renewed at the bank, the same way it was given. The business can withdraw a bank authorisation from its bank’s consumer dashboard at any time, and the data stops.
What happens to the data once it reaches our platform?
Once an accredited provider discloses CDR data to a non-accredited recipient under a business consent, that copy is no longer regulated as part of the CDR. Your customer is told this at the consent screen, in the words the standards require. From that point you handle it under your own privacy obligations, the same as any other customer data you hold. Skript’s copy stays under the CDR privacy safeguards.
Our customers have accounts that need two people to sign. Will consent work?
Usually, yes. Signing rules on payments and the right to share data are set up separately at the bank. Under the CDR Rules a company or partnership nominates one or more people, aged 18 or over, as nominated representatives for data sharing, and once nominated a representative can authorise sharing on their own. Where nobody has been nominated, the bank cannot let the business share, and the bank’s own screens point it to the nomination process. The practical fix is to tell customers in advance: the person connecting the accounts needs to be a nominated representative. More on business accounts and nominated representatives.
Where is the business consent rule written down?
The Competition and Consumer (Consumer Data Right) Rules 2020, rule 1.10A, define a CDR business consumer, a business consumer statement and a business consumer disclosure consent. The ACCC’s CDR business consumers fact sheet explains them in plain terms, and the Data Standards Body’s consumer experience guideline sets out what the consent screen must say. Our accreditation explainer pulls it together with sources.
Which ways of accessing CDR data does Skript support?
Two. A business accessing its own bank data (Subskript), and a business consenting to share its bank data with a platform it uses — business consumer disclosure consent, or BCDC (Superskript and Superskript Aggregator).
That's deliberate. We're business data specialists, and these are the two routes that fit business data. They also keep the compliance burden off you: Skript holds the accreditation as an unrestricted Accredited Data Recipient (ADR), so you don't need any accreditation of your own — you build the product.
We don't offer any other CDR access arrangements, and we work with business account data only.
Which banks are available via Skript?
Skript is connected to over 110 banks in Australia, including:
- Amigo
- AMP Bank
- ANZ
- ANZ Plus
- Arab Bank Australia Limited
- Aussie Home Loans
- Australian Military Bank
- Australian Mutual Bank LTD
- Australian Unity Bank
- Auswide Bank Ltd
- Bank Australia
- Bank First
- Bank of China
- Bank of Melbourne
- Bank of Queensland Limited
- Bank of Sydney
- Bank of us
- BankSA
- BankVic
- bankWAW
- Bankwest
- bcu
- Bell Potter
- Bendigo Bank
- Beyond Bank Australia
- Beyond Bank Warrnambool
- BHCCU
- BOQ Specialist
- Cairns bank
- Card Services
- CBA – Commbiz
- Central Murray Credit Union Limited
- Central West CUL
- Challenger
- Citi
- Coastline Credit Union
- Coles Financial Services
- CommBank
- CommFCU
- Credit Union SA
- DDH Graham
- Defence Bank
- Dnister
- Easy Street
- Family First
- Fire Service Credit Union
- Firefighters Mutual Bank
- First Choice Credit Union
- First Option Bank
- G&C Mutual Bank
- Gateway Bank
- Geelong Bank
- gmcu
- Great Southern Bank
- Health Professionals Bank
- Heritage Bank
- Hiver Bank
- Horizon Bank
- HSBC
- HSBC Bank Australia Limited – Wholesale Banking
- Hume Bank
- Illawarra Credit Union Limited
- IMB Bank
- ING BANK (Australia) Ltd
- Judo Bank
- Kogan Money Credit Cards
- Laboratories Credit Union
- Macquarie Bank Limited
- Maitland Mutual Limited
- ME Bank
- MOVE Bank
- Myer
- MyState Bank
- NATIONAL AUSTRALIA BANK
- Newcastle Permanent Building Society
- ORANGE CREDIT UNION LTD
- P&N Bank
- PayPal Australia
- People’s Choice
- Police Credit Union Ltd
- Qantas Premier Credit Cards
- QBANK
- Qudos Bank
- Queensland Country Bank
- Rabobank
- RACQ Bank
- RAMS Financial Group Pty Ltd
- Regional Australia Bank
- Reliance Bank
- RSL Money
- SocietyOne
- South West Slopes Credit Union Ltd
- Southern Cross Credit Union
- St.George Bank
- Summerland Credit Union
- Suncorp Bank
- Teachers Mutual Bank
- The Capricornian
- The Mac
- Thriday
- TMCU
- Tyro Payments
- u Bank
- UBank
- UniBank
- Unity Bank
- Unloan
- Up
- Virgin Money
- Warwick Credit Union Ltd
- Westpac
- Wise
- Woolworths
- Woolworths Team Bank
How much does Skript charge?
Our pricing is public. Subskript starts from $99/month ex-GST, depending on how often you need data refreshed — 5 accounts included, priced per account with no transaction caps, month-to-month, no setup fee, no lock-in. See the pricing page for the full breakdown.
For platforms serving business customers, Superskript starts from $1,250/month and Superskript Aggregator from $2,500/month; both are scoped with our team. Get in touch and we'll put a number on it.
Is there a limit on transactions?
No. Every plan is priced per connected bank account, and transactions are not counted or capped. A busy trading account and a quiet one cost the same, and there is no overage charge on any plan.
How does Skript compare with other bank-data providers?
We’ll only speak for ourselves, so here is what you can check on our pricing page. The price is published, including the starting price for the enterprise plans. There is no setup fee. Nothing is metered by transaction, so there are no caps and no overage. Billing is month to month with no lock-in. You can sign up and connect your accounts today, without a sales call. You choose the refresh — daily, five times a day or hourly. And we only do business bank data, so the consent flow, the data fields and the support are built for business accounts rather than adapted from a consumer product.
If the provider you’re comparing us with does all of that too, compare us on the data and the service. If not, that’s the difference.
If my business shares its bank data through Skript, how is it protected?
As an unrestricted Accredited Data Recipient (ADR) we’re held to the CDR’s information-security rules, not just our own good intentions.
In practice: we only ever collect data with the account holder’s consent; we never see or store your bank login; we don’t sell your data; and we delete or de-identify it once it’s no longer needed or consent is withdrawn.
How do I get started?
Sign-up is instant. Sign up to the portal to get sandbox keys in minutes, read the API documentation and test against sandbox data — no sales call, no waitlist.
For Superskript or Superskript Aggregator, or anything else, get in touch and we'll scope it with you.
