Under Australia's Consumer Data Right (CDR), your bank data can only be shared with businesses that have been accredited to receive it. These are called Accredited Data Recipients (ADRs). Here's what that means, and how to check it for any provider.
What accreditation requires
An ADR is a business the ACCC has accredited to receive consumer data under the CDR. Before any bank data can flow, an applicant has to demonstrate strict obligations are met, including:
- Information security controls assessed against the CDR's requirements.
- Adequate insurance to cover potential harms.
- Governance and dispute-resolution processes, including membership of an external dispute-resolution scheme.
Accreditation isn't a one-off tick — ADRs have ongoing obligations for how they collect, use, store and delete CDR data.
The CDR Representative model
Not every business that builds a CDR product is accredited in its own name. CDR Rule 1.10AA lets an ADR appoint a CDR Representative to deliver a CDR-powered product under the ADR's accreditation.
That's how Redbark operates. Redbark is a CDR Representative of Fiskil Pty Ltd, an Accredited Data Recipient (accreditation number ADRBNK000246). Fiskil is our Principal ADR and bears primary liability for our handling of CDR data under Rule 1.16A, and we adopt and comply with Fiskil's CDR Policy. In practice, the accredited path is:
your bank → Fiskil → Redbark → your destination, and it only moves with your express consent.
How to verify any provider
You don't have to take anyone's word for it. The ACCC maintains a public CDR register of every accredited provider and their Representatives:
- Search cdr.gov.au/find-a-provider.
- Redbark's appointment is listed there under Fiskil's entry (ADRBNK000246).
For the full detail of how Redbark operates under the CDR, see our Compliance page. To get started, browse the banks we support.