Updated: 4 June 2020 Accredited Data Recipients (ADRs) are The Government agreed to defined as reciprocal data holders implement a Consumer Data once they are accredited and become Major * must make available account Major banks* must Open Banking Right and which applies initially subject to data sharing obligations on & transaction data on Phase 1 products#^. make available to Open Banking. any designated data they hold from Major banks* and Accredited Data account & transaction the dates indicated here Timeline Recipients must make available product data on all Phase 1 & reference data for Phase 1, 2 & 3 products. 2 products.^ General Data Protection Regulation (GDPR) applies in the Major banks* must make available account & Phase 1 products EU and sets new standards for transaction data on Phase 1, 2 & 3 products. data privacy. Savings accounts, Call accounts, Term deposits, Current Major banks* make Major banks* make Accredited Data Recipients must make accounts, Cheque accounts, available product available product available account & transaction data on Debit card accounts, reference data on Phase reference data on Phase Phase 1 products.^ 1 products. 1 & 2 products. Transaction accounts, Personal basic accounts, GST and Tax Accredited Data Recipients must also make available account & transaction accounts, Credit and charge data on Phase 2 & 3 products.^ cards (personal & business)

Phase 2 products 9 May 25 May 1 July 1 Feb 1 July Sep 1 Oct 6 Oct 1 Nov 1 Feb 1 Mar 1 July 1 Nov 1 Feb Home loan, Personal loan, Mortgage offset accounts 2018 2019 2020 2021 2022

Accreditation of data recipients Phase 3 products commences All other banks Business finance, Investment must also make Inquiry into Future Directions available account & loan, Lines of credit (personal & for the CDR business), Overdrafts (personal transaction data on Phase 3 products. Senate Select Committee on FinTech and & business), Asset finance Phased Implementation RegTech All other banks must make announced for Open (including leases), Cash available product reference All other banks must make Banking. management accounts, Farm data on Phase 1 & 2 products. available account & transaction data on Phase 1 & management accounts, 2 products. Pensioner deeming accounts, Key documentation release dates Retirement savings accounts, CDR legislation 1 Aug 2019 ACCC CDR Rules 4 Feb 2020 Trust accounts, Foreign All other banks must make All other banks must make available: currency accounts, Consumer API standards 17 Apr 2020 V1.3.0 available product reference - certain account & transaction data on Phase 1 products^# data on Phase 1 products. - product reference data on Phase 1, 2 & 3 products.^ leases CDR Privacy Safeguard Guidelines 24 Feb 2020

This timeline is a simplified view of the ACCC Phasing table included in the CDR Rules issued on 4 February 2020. In addition, on 4 June 2020 the ACCC provided exemptions for non-major ADIs to delay implementation of consumer data sharing to ADRs until the dates on this timeline. Accredited Data Recipient reciprocal data sharing obligations were also delayed as indicated on this timeline. Data holders and potential Accredited Data Recipients should consult the phasing table to ascertain the products, account types and data types detail relating to each time period. * Major banks include ANZ, CBA, NAB, and but exclude their sub-brands i.e. of , St George, etc OpenCopyright data: © Deloitte value Risk Advisoryunlocked Pty Ltd. All Rights Reserved. ^ Account & transaction data sharing with ADRs only. Data sharing direct to consumers has been deferred to 1 November 2021 for all Data Holders. # Only for open accounts in the name of individuals