CDR now part of New Zealand law

The Consumer Data Right (CDR) is now part of New Zealand (NZ) law after the enactment of the Customer and Product Data Act 2025 on 29 March 2025.

The CDR will apply progressively to various designated sectors, with banking to be the first sector required to comply with the CDR, along with corresponding regulations and standards to be issued under the Act, by 1 December 2025.

The CDR will permit customers to authorise accredited third-party service providers (“accredited requestors”) to request data or initiate certain actions on their behalf from “data holders”, which will be required to comply with these requests and disclose customer data to the accredited requestors.

Businesses looking to become “accredited requestors” under the NZ CDR, will now be looking towards on familiarising themselves with the new Act and the anticipated requirements for any application to the NZ Ministry of Business, Innovation, and Employment (MBIE).