Customer and Product Data Act 2025
Summary of changes
These summaries explain recent changes to the law. They are generated by AI comparing versions of the legislation, so they might oversimplify, miss details, or get things wrong. Learn more about how we track these changes.


14 May 2025
- Updated the Act's title to reflect the new year
- Changed the commencement date of the Act
- Amended the purpose of the Act to focus on the value of data for customers and society
- Updated various definitions in section 5 to reference new section numbers
- Added a new transitional provision to Schedule 1
- Updated provision numbers and references throughout the Act
- Clarified the territorial application of the Act
- Updated the definition of 'Customer' and 'Designated customer data'
- Introduced new requirements for data holders to verify the identity of requestors
- Updated the requirements for accredited requestors to keep records
- Introduced new provisions for the chief executive to verify applicant identities and impose conditions on accreditation
- Updated the provisions for exemptions, levies, and fees
- Introduced new provisions for civil liability remedies and pecuniary penalties
- Updated the provisions for infringement notices and reminder notices
- Introduced new provisions for the chief executive's functions and warnings
- Updated the provisions for appeals against accreditation decisions and the operation of the register
- Introduced new provisions for the sharing of information with law enforcement or regulatory agencies
- Updated the provisions for general defences and technical faults
Affected provisions
- 1: TitleUpdated the Act's title to reflect the new year
- 1: Transitional, savings, and related provisionsAdded a new transitional provision to Schedule 1
- 2: CommencementChanged the commencement date of the Act
- 3: PurposeAmended the purpose of the Act to focus on the value of data for customers and society
- 5: InterpretationUpdated various definitions in section 5 to reference new section numbers
- 8: Customer, customer data, and designated customer dataUpdated the definition of 'Customer' and 'Designated customer data'
- 9: Product, product data, and designated product dataUpdated the definition of 'Customer' and 'Designated customer data'
- 11: Territorial application of ActClarified the territorial application of the Act
- 14: Data holder must provide customer data to customerIntroduced new requirements for data holders to verify the identity of requestors
- 15: Data holder must provide customer data to accredited requestor if customer’s authorisation is confirmedIntroduced new requirements for data holders to verify the identity of requestors
- 16: Data holder may or must refuse request for data in certain circumstancesUpdated provision numbers and references throughout the Act; Updated the provisions for exemptions, levies, and fees
- 18: Data holder must perform certain actions on customer’s requestIntroduced new requirements for data holders to verify the identity of requestors
- 19: Data holder must perform certain actions on accredited requestor’s request if customer’s authorisation is confirmedIntroduced new requirements for data holders to verify the identity of requestors
- 20: Data holder may or must refuse to perform actions in certain circumstancesUpdated provision numbers and references throughout the Act
- 21: How data holders and accredited requestors must deal with joint customersUpdated provision numbers and references throughout the Act
- 23: Data holder may refuse request for data in certain circumstancesUpdated provision numbers and references throughout the Act
- 28: Electronic system must comply with prescribed technical or performance requirementsUpdated provision numbers and references throughout the Act
- 29: Chief executive may require data holder to test electronic systemUpdated provision numbers and references throughout the Act; Introduced new provisions for the chief executive's functions and warnings
- 32: Requirements for data holders in regulations or standardsUpdated provision numbers and references throughout the Act
- 33: Accredited requestors must comply with requirements for making information availableUpdated provision numbers and references throughout the Act
- 35: Contravention of specified disclosure requirement is infringement offenceUpdated provision numbers and references throughout the Act
- 37: Giving authorisationUpdated provision numbers and references throughout the Act
- 38: Ending authorisationUpdated provision numbers and references throughout the Act
- 39: Authorisation must be confirmedUpdated provision numbers and references throughout the Act
- 40: Customer or secondary user must be able to control authorisationUpdated provision numbers and references throughout the Act
- 41: Accredited requestor must comply with prescribed duties in respect of authorisationUpdated provision numbers and references throughout the Act
- 42: Authorisation must not be required as condition of providing productUpdated provision numbers and references throughout the Act
- 43: Only customer, secondary user, or accredited requestor may request regulated data serviceUpdated provision numbers and references throughout the Act; Introduced new provisions for the chief executive to verify applicant identities and impose conditions on accreditation
- 44: Offence for contravention of request restrictionUpdated provision numbers and references throughout the Act
- 45: Verification of identity of person who makes requestUpdated provision numbers and references throughout the Act
- 46: Data holder must keep records about regulated data serviceUpdated provision numbers and references throughout the Act; Updated the requirements for accredited requestors to keep records
- 47: Accredited requestor must keep records about regulated data serviceUpdated the requirements for accredited requestors to keep records
- 48: Data holders and accredited requestors must have customer complaints processUpdated provision numbers and references throughout the Act
- 49: Data holder or accredited requestor must be member of dispute resolution scheme (if scheme has been prescribed)Updated provision numbers and references throughout the Act
- 50: Rules of scheme may be changed to provide for complaints about regulated data servicesUpdated provision numbers and references throughout the Act
- 53: Chief executive may require person to supply information or produce documentsUpdated provision numbers and references throughout the Act; Updated the provisions for appeals against accreditation decisions and the operation of the register
- 54: Person has privileges of witness in courtUpdated provision numbers and references throughout the Act
- 55: Effect of proceedingsUpdated provision numbers and references throughout the Act
- 56: Effect of final decision that exercise of powers under section 53 unlawfulUpdated provision numbers and references throughout the Act
- 57: Offence for failing to comply with notice to supply information or produce documentsUpdated provision numbers and references throughout the Act
- 61: Prohibition against holding outIntroduced new provisions for civil liability remedies and pecuniary penalties
- 62: Infringement offencesIntroduced new provisions for civil liability remedies and pecuniary penalties
- 63: When infringement notice may be issuedIntroduced new provisions for civil liability remedies and pecuniary penalties; Updated the provisions for infringement notices and reminder notices
- 64: Revocation of infringement notice before payment madeIntroduced new provisions for civil liability remedies and pecuniary penalties; Updated the provisions for infringement notices and reminder notices
- 65: What infringement notice must containIntroduced new provisions for civil liability remedies and pecuniary penalties; Updated the provisions for infringement notices and reminder notices
- 66: How infringement notice may be servedIntroduced new provisions for civil liability remedies and pecuniary penalties; Updated the provisions for infringement notices and reminder notices
- 67: Payment of infringement feesIntroduced new provisions for civil liability remedies and pecuniary penalties; Updated the provisions for infringement notices and reminder notices
- 68: Reminder noticesIntroduced new provisions for civil liability remedies and pecuniary penalties; Updated the provisions for infringement notices and reminder notices
- 69: Civil liability remedies available under this subpartIntroduced new provisions for civil liability remedies and pecuniary penalties
- 70: When High Court may make pecuniary penalty orderIntroduced new provisions for civil liability remedies and pecuniary penalties
- 71: Maximum penalty (Tier 1)Introduced new provisions for civil liability remedies and pecuniary penalties
- 72: Maximum penalty (Tier 2)Introduced new provisions for civil liability remedies and pecuniary penalties
- 73: Considerations for court in determining pecuniary penaltyIntroduced new provisions for civil liability remedies and pecuniary penalties
- 75: Declaration of contraventionIntroduced new provisions for civil liability remedies and pecuniary penalties
- 76: Purpose and effect of declaration of contraventionIntroduced new provisions for civil liability remedies and pecuniary penalties
- 77: What declaration of contravention must stateIntroduced new provisions for civil liability remedies and pecuniary penalties
- 78: When court or Disputes Tribunal may make compensatory ordersIntroduced new provisions for civil liability remedies and pecuniary penalties
- 79: Terms of compensatory ordersIntroduced new provisions for civil liability remedies and pecuniary penalties
- 80: Court may grant injunctionsIntroduced new provisions for civil liability remedies and pecuniary penalties
- 81: When court may grant restraining injunctionsIntroduced new provisions for civil liability remedies and pecuniary penalties
- 82: When court may grant performance injunctionsIntroduced new provisions for civil liability remedies and pecuniary penalties
- 83: Chief executive's undertaking as to damages not requiredIntroduced new provisions for civil liability remedies and pecuniary penalties
- 84: Rules of civil procedure and civil standard of proof applyIntroduced new provisions for civil liability remedies and pecuniary penalties
- 85: Limit on proceedingsIntroduced new provisions for civil liability remedies and pecuniary penalties
- 86: More than 1 civil liability remedy may be given for same conductIntroduced new provisions for civil liability remedies and pecuniary penalties
- 87: Only 1 pecuniary penalty order may be made for same conductIntroduced new provisions for civil liability remedies and pecuniary penalties
- 88: No pecuniary penalty and criminal penalty for same conductIntroduced new provisions for civil liability remedies and pecuniary penalties
- 89: General defences for person in contraventionUpdated provision numbers and references throughout the Act; Updated the provisions for general defences and technical faults
- 90: Defence for contraventions due to technical faultUpdated provision numbers and references throughout the Act; Updated the provisions for general defences and technical faults
- 92: Jurisdiction of High CourtUpdated provision numbers and references throughout the Act
- 93: Jurisdiction of District CourtUpdated provision numbers and references throughout the Act
- 94: Jurisdiction of Disputes TribunalUpdated provision numbers and references throughout the Act
- 95: Chief executive’s functionsUpdated provision numbers and references throughout the Act; Introduced new provisions for the chief executive's functions and warnings
- 106: Minister must consult on proposed designationUpdated provision numbers and references throughout the Act
- 107: Contents of designation regulationsUpdated provision numbers and references throughout the Act
- 108: Application for accreditationUpdated provision numbers and references throughout the Act
- 109: How application is madeUpdated provision numbers and references throughout the Act
- 110: Application may be made before designation regulations fully in forceUpdated provision numbers and references throughout the Act
- 111: Chief executive must verify applicant’s identityIntroduced new provisions for the chief executive to verify applicant identities and impose conditions on accreditation
- 112: Decision by chief executiveIntroduced new provisions for the chief executive to verify applicant identities and impose conditions on accreditation
- 113: Notice of decisionUpdated provision numbers and references throughout the Act
- 114: Application to modify accreditationUpdated provision numbers and references throughout the Act
- 116: Duration of accreditationUpdated provision numbers and references throughout the Act
- 117: Renewal of accreditationUpdated provision numbers and references throughout the Act
- 118: When chief executive may suspend or cancel accreditationUpdated provision numbers and references throughout the Act
- 119: Appeals against accreditation decisionsUpdated the provisions for appeals against accreditation decisions and the operation of the register
- 120: Crown organisations may be customer, data holder, or accredited requestorUpdated provision numbers and references throughout the Act
- 121: Register of participants in customer and product data systemUpdated provision numbers and references throughout the Act; Updated the provisions for appeals against accreditation decisions and the operation of the register
- 122: Purposes of registerUpdated provision numbers and references throughout the Act; Updated the provisions for exemptions, levies, and fees; Updated the provisions for appeals against accreditation decisions and the operation of the register
- 123: Operation of registerUpdated provision numbers and references throughout the Act; Updated the provisions for appeals against accreditation decisions and the operation of the register
- 124: Persons that will become data holders when designation comes into force must provide information to chief executiveUpdated provision numbers and references throughout the Act
- 125: Other data holders must provide information to chief executiveUpdated provision numbers and references throughout the Act; Updated the provisions for exemptions, levies, and fees; Updated the provisions for appeals against accreditation decisions and the operation of the register
- 126: Contents of register that is publicly availableUpdated provision numbers and references throughout the Act; Updated the provisions for appeals against accreditation decisions and the operation of the register
- 127: Contents of register that is available to data holders and accredited requestors (other than information publicly available under section 126)Updated provision numbers and references throughout the Act; Updated the provisions for appeals against accreditation decisions and the operation of the register
- 128: Sharing of information with certain law enforcement or regulatory agenciesUpdated provision numbers and references throughout the Act; Introduced new provisions for the sharing of information with law enforcement or regulatory agencies
- 129: Conditions that may be imposed on providing information under this subpartUpdated provision numbers and references throughout the Act
- 130: Restriction on publication, disclosure, or useUpdated provision numbers and references throughout the Act
- 133: Regulations relating to fees and chargesUpdated provision numbers and references throughout the Act
- 134: Miscellaneous provisions relating to fees and chargesUpdated provision numbers and references throughout the Act
- 136: Miscellaneous provisions relating to leviesUpdated provision numbers and references throughout the Act; Updated the provisions for exemptions, levies, and fees
- 137: Minister must consult on proposed regulationsUpdated provision numbers and references throughout the Act; Updated the provisions for exemptions, levies, and fees
- 139: Chief executive must comply with requirements before making standardUpdated provision numbers and references throughout the Act; Introduced new provisions for the chief executive's functions and warnings
- 141: ExemptionsUpdated provision numbers and references throughout the Act; Updated the provisions for exemptions, levies, and fees
- 142: Effect of breach of term or condition of exemptionUpdated provision numbers and references throughout the Act
- 144: Chief executive’s warnings, reports, guidelines, or comments protected by qualified privilegeUpdated provision numbers and references throughout the Act; Introduced new provisions for the chief executive's functions and warnings
- 145: NoticesUpdated provision numbers and references throughout the Act
- 146: Service of noticesUpdated provision numbers and references throughout the Act
- 147: Principal ActUpdated provision numbers and references throughout the Act
- 148: Schedule 1 amendedUpdated provision numbers and references throughout the Act
- 149: Principal ActUpdated provision numbers and references throughout the Act
- 150: Section 75 amended (Referral of complaint to another person)Updated provision numbers and references throughout the Act
- 151: Section 208 amended (Consultation)Updated provision numbers and references throughout the Act
- 152: Principal ActUpdated provision numbers and references throughout the Act
- 153: Section 2 amended (Interpretation)Introduced new provisions for civil liability remedies and pecuniary penalties
