Rectification schedule - active data holders with implementation gaps

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered - Delivered functionality that allows account holders to cease secondary user data sharing for a specific authorisation and also allows account holders to remove the secondary user permission completely.

Commonwealth Bank of Australia (CBA)

Brand:

Brands: CommBank, Bankwest, and CommBiz

1. ‘Get Metrics’ version 4 delivery

CBA will deliver version 4 of the ‘Get Metrics’ endpoint

2. CBA – Secondary User indication Rules

CBA will build the functionality for account holders to cease secondary user data sharing on an ADR basis

Commonwealth Bank of Australia (CBA)

Brand:

Bankwest

3. Bankwest - Secondary User Indication Rules

Bankwest will build the functionality for account holders to cease secondary user data sharing on an ADR basis

1. Get Metrics v4

2. Account Details API Version Bug:

When calling GetAccountDetail with an x-v of 2 and an x-min-v of 1, the API fails with a 406 due to issue with version handling logic. 

3. Additional transaction service codes provided in Get transactions detail.

Identifier of the applicable overlay service. Valid values are: X2P1.01. NAB also provides X2P1.04 and SCT.04 in some situations

4. CreditLimit field in GET Account Balance API

CreditLimit field within GET Account Balance is returning empty.

5. NAB currently does not provide transaction ids for non-NPP transactions

10. Display Name (displayName) values from Get Accounts and Get Account Details API don’t match

6. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing.

Implementation paused pending rules review

7. In Account Details API, current “DepositRate” and “LendingRate” is provided to ADRs. However, additional fields present in” Deposit Rates” and “Lending Rates” objects are currently not returned for business and personal products.

8. In Account Details API, “Features” optional object  for the accounts is not returned for business and personal products.  

9. In Account Details API,  “Fee” optional object for the accounts is not returned for business and personal products. 

Westpac Banking Corporation

Brand:

Westpac,

St.George,

Bank of Melbourne,

Bank SA,

Asgard

1. Get Metrics v4

2. Secondary User Indication Rules

Westpac received guidance from the ACCC in a letter dated 26 October on the interpretation of rules concerning an account owner’s ability to restrict authorised Secondary Users from further data sharing for specific accredited persons.

Westpac have delivered functionality that allows an account owner to stop continuing data sharing consents authorised by secondary users to ‘an accredited person’. This functionality is in place for all currently delivered scope.

2. Rule1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements – Ceasing secondary user data sharing.

Alternate functionality of allowing account holders to withdraw secondary user account sharing for specific authorisations was delivered on 23/6/23. 

Further implementation has been paused pending rules review.

Australian Military Bank

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements -Ceasing Secondary User Data Sharing

Implementation paused pending rules review

Australian Military Bank

Brand: RSL Money

2. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements -Ceasing Secondary User Data Sharing

Implementation paused pending rules review

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements -Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

1. V1.23.0

4. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements -Ceasing Secondary User Data Sharing

Implementation paused pending rules review

Auswide Bank Ltd

Brand: 

Auswide Bank

1. Aspects of the Secondary User obligations for Data Holders relating to the ability of an Account Holder to block a Secondary User from sharing data from a specific account with a specific accredited person (i.e. Data Recipient).

Implementation paused pending rules review

4. Blocking sharing for specific ADRs in relation to secondary users not supported

Alternative functionality to be delivered

1. Get Metrics v4

2. Non-Individuals

Ceasing secondary user sharing to specific ADR Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) of the Competition and Consumer (Consumer Data Right) Rules 2020.

Implementation paused pending rules review

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements -Ceasing Secondary User Data Sharing

Implementation paused pending rules review

Bank of Queensland Ltd

Brands:

BOQ,

Virgin Money Australia,

BOQ Specialist,

DDH Graham

2. Customers on legacy platforms do not experience commensurate latency 

3. Blocking sharing for specific ADRs in relation to secondary users not supported

Bank of Queensland Ltd

Brands:

BOQ

Virgin Money Australia

Bank of Queensland Ltd

Brand:

BOQ Specialist

5. Currently, data presented via the CDR APIs is not commensurate with data presented via the primary digital channel

Bank of Queensland Ltd

Brand:

ME Bank

3. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Implementation paused pending rules review

Bendigo and Adelaide Bank Ltd

Brand:

Bendigo Bank

1. Get Metrics v4

3. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements – Ceasing Secondary User Data Sharing

Implementation paused pending rules review

2. Get Metrics v4 delivery

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements- Ceasing Secondary User Data Sharing. Alternative functionality to be delivered

1. Get Metrics v.4

2. Data Quality

a. Biller name is incorrect in Transaction response.

b. Transactions returned in API requests include non-statemented transactions.

c. Transaction descriptions on transaction data are system descriptions not transaction narratives.

d. Optional "is owned", "Product Category" and "Open Status" parameter is not supported for certain API’s

14 December 2023

3. Non-Functional

GetTransactionsAPI - Unable to retrieve the transactions within specified timeframes of 1.5 or 4 seconds when the transaction volume exceeds 1000 records.

4. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered.

Coastline Credit Union Limited

Brand:

Coastline Credit Union

1. Account Balance display in Internet Banking Sharing Screens

2. Incorrect messaging for Joint Account Holders

3. Cease Secondary Sharing

Community First Credit Union

Brand:

Community First Credit Union; Easy Street; Amigo

1. Rule 15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements – Ceasing Secondary User Data Sharing

Implementation paused pending rules review

2. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Account holders will be unable to indicate that they no longer approve of data disclosure to a particular accredited person in response to a request made by a particular secondary user. 

Implementation paused pending rules review 

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

Family First Credit Union Limited

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements- Ceasing Secondary User Data Sharing

Implementation paused pending rules review

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements- Ceasing Secondary User Data Sharing

Implementation paused pending rules review

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements- Ceasing Secondary User Data Sharing

Implementation paused pending rules review

First Option Bank Ltd

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

G&C Mutual Bank Limited

Brand:

 G&C Mutual Bank

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

2. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

Heritage and People's Choice Ltd

Brand:

People's Choice Credit Union

1. Secondary Users functionality to enable an account holder to permanently withdraw authority for a secondary user to share to a specified ADR entity not available

Functionality available to enable account holders to cease secondary user data sharing for a specific authorisation.

2.  Account holder unable to cease data sharing to a particular accredited person in response to a request made by a secondary user (Rule1.15(5)(b)(i))

Implementation paused pending rules review

1. Secondary user data sharing not supported

Implementation paused pending rules review

2. Performance times not aligned to non-functional requirements in limited cases.

3. Get metrics reporting is not aligned to the standards in some instances.

4. Data sharing is not currently available for  multi-currency sub-accounts under the primary Everyday Global Account.

5. Notifications are not being sent to joint account holders on expiry of data sharing authorisations.

6. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements-Ceasing Secondary User Data Sharing

Implementation paused pending rules review

7. Secondary users can be enabled for credit cards in line with the rules. However, the credit card is not available for sharing by secondary users at this time.

HSBC Bank Australia Limited –

Brand:

HSBC Bank Australia Limited -

Wholesale Banking

8. Get Metrics V4

1. FDO for data holders ignoring unsupported authorisation scopes

2. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements- Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

1. Get Bulk Balances API returned nil data

2. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements- Ceasing Secondary User Data Sharing

Implementation paused pending rules review

TBC

3. Historical CDR data available from 1 January 2017: Transactional data is not available from 1 January 2017 to 1 October 2018. Transactional data is available from 2 October 2018 onwards.

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements – Ceasing Secondary User Data Sharing

Implementation paused pending rules review

digitalWallet element of BankingScheduledPaymentTo (V2) API schema.

V2 versions of GetScheduledPaymentsForAccount, GetScheduledPaymentsBulk & GetScheduledPaymentsForSpecificAccounts endpoints.

GetMetrics API (support for v4 and v5)

2. Secondary User obligations for Data Holders relating to the ability of an Account Holder to block a Secondary User from sharing data from a specific account with a specific accredited person. Non-compliance with Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) from Secondary Users/Nominated Representatives Nov 1 Update

Implementation paused pending rules review.

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

Macquarie Bank Ltd 

Brand: 

Macquarie Bank

1. CDR Data Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) due 1 November 2022 – Secondary Users obligations (non- account holders) to share data on the account owner(s) behalf

Alternative functionality to be delivered

2. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements- Ceasing Secondary User Data Sharing

Implementation paused pending rules review

1. Delayed delivery of Joint Accounts requirements

2. Delayed delivery of non-individuals, or partnerships, or nominated representatives or secondary users

Implementation paused pending rules review

Newcastle Greater Mutual Group Limited

Brand:

Newcastle Permanent

1. Compliance with Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) of the Competition and Consumer (Consumer Data Right) Rules 2022.

Alternative functionality to be delivered

Orange Credit Union Ltd

Brand:

Orange Credit Union

1. Product reference data compliance - loan purpose field missing.

4. Rule 1.15 (5)(b)(b) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Implementation paused pending rules review

1. The payee/ merchant name for scheduled payments is not being returned. This impacts consents related to our personal and premier digital wallet accounts and will impact business digital wallet accounts.

Police & Nurses Limited

Brands:

P&N Bank

bcu

2. OBS-857: Nickname not displaying consistently in schedule payment information. Determine correct nickname for scheduled payments by matching Internet Banking.

3. End to End ID not shown in Get Transaction Detail.

4. Non-individuals - Ceasing secondary user sharing to specific ADR Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) of the Competition and Consumer (Consumer Data Right) Rules 2020.

Alternative functionality to be delivered

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements- Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

2. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Implementation paused pending rules review

1. Get Metrics v 4

2. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered.

Qudos Bank

1. GetMetrics v4 implementation gap 

31 December 2023

2. Non-individuals

Ceasing secondary user sharing to specific ADRRule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) of the Competition and Consumer (Consumer Data Right) Rules 2020. Seeking clarification on requirements to determine changes and impact to delivery timeline.

1. Non-individuals

Ceasing secondary user sharing to specific ADRRule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) of the Competition and Consumer (Consumer Data Right) Rules 2020. Seeking clarification on requirements to determine changes and impact to delivery timeline

1. The functionality for an Account Holder to block their Secondary User from data sharing from an account with a specified Accredited Data Recipient is currently unavailable.

Implementation paused pending rules review

TBC

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Implementation paused pending rules review

Alternative functionality to be delivered

South West Slopes Credit Union Ltd

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

1. Suncorp is experiencing intermittent technical errors which can result in consents “breaking”. Once this occurs, further requests for data will be rejected with 401 error. Customers can rectify the issue by cancelling and creating a new consent or by amending their existing consent.

2.  Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements- Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

Teachers Mutual Bank Limited

Brand: 

Teachers Mutual Bank

1. Get Metrics v4

2. Allow id token encryption for Auth Code Flow

3. Get Bulk Balances API returned nil data

4. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements- Ceasing Secondary User Data Sharing

Implementation paused pending rules review

1. Decision Proposal 288

Non-Functional Requirements and Get Metrics - v4

2. Transaction long description (Teller Journal Transactions) (780)

3. NPP End to end ID missing - Get Transaction Detail (572)

4. Non-individuals - Ceasing secondary user sharing to specific ADR Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) of the Competition and Consumer (Consumer Data Right) Rules 2020. Seeking clarification on requirements to determine changes and impact to delivery timeline

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Implementation paused pending rules review

1. FDO for data holders ignoring unsupported authorisation scopes

2. Incorrect error for missing x-v - Response and error code incorrect

3. Invalid x-fapi-customer-ip-address does not error

4. Page beyond last page produces unexpected error when a 400 error should be returned

5. Scheduled Payments nextPaymentDate incorrectly formatted

6. Non-individuals - Ceasing secondary user sharing to specific ADR Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) of the Competition and Consumer (Consumer Data Right) Rules 2020. Seeking clarification on requirements to determine changes and impact to delivery timeline

Unity Bank Limited

Brands:

Unity Bank

Reliance Bank

3. Existing software does not cater for Rule 1.15 (5)(b)(i) and Rule 4.6A(a)(ii) in relation to account holders ceasing a sharing arrangement to a data recipient made by a secondary user

Alternative functionality to be delivered

Victoria Teachers Limited (t/a Bank First)

1. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Implementation paused pending rules review

1. Get Customer Details - areaCode and fullNumber in CommonPhoneNumber for purpose HOME  

2. Rule 1.15(5)(b)(i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

1. Rule 1.15(5)(b) (i) and Rule 4.6A(a)(ii) requirements - Ceasing Secondary User Data Sharing

Alternative functionality to be delivered

AGL Energy Limited (Energy) - AGL

Globird Energy Pty Ltd

Brand: 

Globird Energy

Momentum Energy Pty Ltd

Brand: 

Momentum Energy

a) one or more services that are active; AND

b) one or more services that have been closed for greater than 24 months

Implementation paused pending rules review.

Powershop Australia Pty Ltd

Brand:

Kogan Energy

1. Delivery of end point: 

Get Energy Account Details

Get Invoices For Account

Get Invoices For Specific Accounts

Get Bulk Invoices

Get Billing For Account

Get Billing For Specific Accounts

Get Bulk Billing

Powershop Australia Pty Ltd

Brand:

Powershop

3. Delivery of end point: 

Get Energy Account Details

Get Invoices For Account

Get Invoices For Specific Accounts

Get Bulk Invoices

Get Billing For Account

Get Billing For Specific Accounts

Get Bulk Billing

Sumo Power Pty Ltd

1. Get Metrics APIs have not yet been built

Nominated representatives cannot provide authorisation to share data