About the Consumer Data Right
The Consumer Data Right (CDR) is a data sharing and portability initiative introduced by the Australian Government to:
- enable consumers to safely share the data that businesses hold about them
- help consumers make comparisons between products and services to find offers suitable to their needs
- encourage competition between providers and more innovative product and service offerings
The CDR enables retail and business consumers of Judo Bank to share selected Judo Bank banking data with other businesses that have been through a rigorous accreditation process, also known as ‘Accredited Data Recipients’ (ADRs), such as another bank or fintech, or to their authorised representatives.”
For more information on the Consumer Data Right, click here: What is CDR? | Consumer Data Right
Judo Bank data holder
As a “data holder” Judo shares your banking data free of charge with other third parties, as long as they are an Accredited Data Recipient (ADR) and you have given appropriate consent to such sharing or unless otherwise required by law.
Open Banking is intended to give you greater access and control over banking data and allow you to share that data safely, efficiently and conveniently with accredited organisations (also known as Accredited Data Recipients or "ADRs").
Eligibility
An eligible Judo customer can share their data with an ADR, such as a budgeting app or internet banking app, once they authorise us to do so. You are eligible to share your banking data if you:
- Are over 18
- Have a Judo product that is accessible online using Judo’s digital banking app or web-based platform
- Have a valid mobile phone number connected to your Judo account (required to authenticate with a one-time-password (OTP). We will never ask for your internet banking password when sharing data using the CDR)
How do I access and share my data?
- In your ADR app or website, select the banking data you would like to share
- Select the period of time you would like to share your data for (e.g. once, 3 months, 6 months or 12 months. Cannot be more than 12 months for individuals, but may be up to 7 years for business use cases)
- Select "Judo Bank" to commence the data sharing consent process
- You will be prompted to enter your Judo login credentials and then verify who you are using an OTP. You will never be asked for your internet banking password when sharing data using the CDR.
- Next, you will see Judo screens where you can select the entity and accounts you would like to share data from
Confirming the data being shared, you will then be returned to the ADR app or website you have elected to share data with.
You can view, manage or revoke your data sharing consents at any time using your data sharing dashboard which can be accessed using the link below. The data sharing agreement you have with each ADR governs how your CDR data is deleted or de-identified after your sharing consent is revoked.
For information, please refer to our policy which describes what data will be available for you to share and how to make enquiry or complaint.
Download our Consumer Data Policy here.
Open Banking FAQs
Q: Who can share their data?
Eligible individuals (single person only) and joint Account Holders who are 18 years or older, partnerships, corporate trustees and companies with an online account are able to share data regarding their eligible accounts. You may also appoint or remove a secondary user on an account you hold via your consumer dashboard.
For joint accounts, an Account Holder can share data without approval of the other party or parties. All Account Holders will be notified that data sharing has commenced and when it is varied and have the right to revoke any individual sharing arrangement or all data sharing from the joint account. If data sharing is revoked for the joint account, no joint holder will be able to share data from that account. If data sharing for the account has been revoked and an Account Holder wishes to share data, all parties will need to approve re-enablement of data sharing from the joint account. Once approved, Account Holders can then consent to share again without the approval of other parties.
For partnerships, corporate trustees and companies, authorised signatories to the accounts can elect themselves as a Nominated Representative so they can give, vary, manage and/or revoke authorisations to share data of current or closed eligible accounts. To get set up as a Nominated Representative, call 13 58 36 during business hours Monday to Friday 8:30 am to 5:30 pm Melbourne time (excluding public holidays) or contact your banker.
Q: How do I view and manage who I am sharing data with?
You can view and manage your data sharing on the accredited third-party app you are using the data with or via the Judo Open Banking Dashboard.
On your Judo Open Banking Dashboard, you will see a list of all the ADRs you are sharing data with now and in the past. You will be able to view their details, the data being shared, any amendments to the authorisation and when your authorisation will expire or has expired. You also are able to immediately stop sharing data with any ADR by pressing the “Stop sharing” button on the details screen for any currently active sharing arrangement.
If you are having issues accessing your dashboard, please contact us on 13 Judo (13 58 36) during business hours Monday to Friday 8:30 am to 5:30 pm Melbourne time (excluding public holidays) or fill out a contact form on our website at: www.judo.bank/contact-us so we can get in touch with you. We will aim to action your request within 2 business days of notification.
Q: My data doesn't look correct. What do I do?
Please call 13 58 36 during business hours Monday to Friday 8:30 am to 5:30 pm Melbourne time (excluding public holidays) or fill out our contact form so we can contact you. If you ask us to correct your Consumer Data Right (CDR) data and we’ve already disclosed that data, we will:
- acknowledge receipt of your request as soon as practicable; and
- correct the data (to the extent we can) within 10 business days of your request, free of charge
- notify you as to how we responded to your request or, if it was not considered appropriate to correct the data, tell you why a correction is unnecessary or inappropriate and advise you of our complaint process if you are not satisfied with our response.
If we are made aware of any inaccurate, out of date or incomplete CDR data we will advise you as soon as is practicable, or at least within 5 business days, by email of the data inaccuracy, including the following details:
- The error in the CDR data
- The ADR(s) who received the incorrect CDR data
- The date of disclosure
- That Judo will disclose the corrected CDR data (at no charge) to the ADR if requested by you
- Our complaint process, if you are not satisfied with our response
Q: Where can I get more information about open banking and Consumer Data Right?
To find out more information about open banking and the CDR Click here.
Q: What are my Judo login credentials?
You will need to provide your login credentials to receive the one-time-password (OTP). Your Judo login credentials will be your email address linked to your Judo account, your date of birth and your mobile number. If you are unable to provide these credentials or unsure of them, please call 13 58 36 during business hours Monday to Friday 8:30 am to 5:30 pm Melbourne time (excluding public holidays) or email customers@judo.bank for assistance.
Q: How safe is Open Banking?
Your privacy is our priority. We understand that giving third party access to your banking data may seem a little daunting. Rest assured, Open Banking mandates privacy safeguards and other protections that seek to ensure your data is shared safely and securely. These include:
- You choose if you want to participate and who you share your data with and when
- Only third parties that are accredited by the ACCC can seek permission to access your data
- You can manage what data you share and cancel sharing at any time
- You can ask for your data to be deleted by the third-party ADR. You can authorise a third-party ADR to access your data for a nominated time, up to 12 months
- After 12 months, a third-party ADR’s access to your data will automatically expire, although you can revoke your consent earlier than this. This means they will not have access to your data for an indefinite amount of time
Q: What is a Nominated Representative?
A nominated representative is a person who can give, vary, manage and/or revoke authorisations to share data about a non-individual Account Holder’s (eg a partnership, corporate trustee or company) current or closed eligible accounts under CDR laws with ADRs on the Account Holder’s behalf.
Q: How do I get set up as a Nominated Representative?
To get set up as a Nominated Representative, please contact 13 58 36 during business hours Monday to Friday 8:30 am to 5:30 pm Melbourne time (excluding public holidays) or talk to your banker.
No Question's Found!
Important Information
This policy outlines how Judo Bank Pty Ltd ACN 615 995 581, Australian Credit Licence and AFSL 501091 (Judo, we, us or our) manages certain data under the CDR regime in our capacity as a ‘Data Holder’ under that regime. Broadly, it describes how you may seek access to, or disclosure of, your ‘CDR data’, how you may correct any CDR data we hold about you and our complaints handling process.
For information on how we collect, use, disclose, hold, manage, protect and allow you to correct your personal information (including sensitive information or credit-related personal information) please refer to our Privacy Policy.