Consumer Data Right: Privacy Impact Assessment (September 2021)

Treasury engaged Maddocks to conduct an independent analysis and assessment of the proposed rules amendments (version 3) and prepare a Privacy Impact Assessment (PIA).

The purpose of this assessment was to identify privacy risks to individuals arising from the proposed amendments and set out recommendations for managing, minimising or eliminating these impacts.

Treasury has prepared a response to the recommendations set out by Maddocks in their Privacy Impact Assessment.

The assessment is a living document, and updates will occur where any change to the Consumer Data Right significantly impact upon privacy. The Consumer Data Right Bill mandates assessments of impacts to privacy as part of the sector designation and rulemaking stages.