If you've ever applied for a business loan and spent an afternoon re-downloading the same six months of bank statements you'd already sent to two other lenders, Australia's open banking rules just changed that. The Consumer Data Right (CDR) — the regulatory framework that lets you securely share your own financial data with accredited providers instead of emailing PDFs around — has quietly expanded beyond the big banks. From 13 July 2026, non-bank lenders and Buy Now Pay Later providers are in scope too, with the next phase landing in November. For a small business owner comparing finance options, that's a real, practical shift in how fast and how cheaply you can borrow.
Key Takeaways
- The Consumer Data Right now extends to non-bank lenders — mortgage, car finance, personal loan and BNPL providers — not just the major banks.
- Product data sharing (rates, fees, eligibility criteria) started 13 July 2026; actual transaction-data sharing begins 9 November 2026 for the largest non-bank lenders.
- At least 35 new data holders are joining the CDR system through this expansion, according to the ACCC.
- Being "CDR-accredited" is not the same as being the cheapest lender — accreditation is a data-security standard, not a pricing signal.
- Clean, up-to-date bookkeeping is what actually determines whether faster data sharing translates into a faster loan decision.
What Just Changed, and Why It Matters for Small Business
The Consumer Data Right is Australia's open banking framework, regulated by the ACCC, that lets you direct your financial data to accredited third parties instead of manually supplying documents. CDR Rules Version 8 extends this from banks to non-bank lenders for the first time — covering mortgage lenders, car finance providers, personal loan providers, and BNPL providers.
Product data sharing (interest rates, fees, charges and eligibility criteria) began on 13 July 2026. Actual transaction and account data sharing — the part that replaces manual document uploads — starts 9 November 2026 for the largest providers and 10 May 2027 for the rest. According to the ACCC, at least 35 new data holders are joining the system through this expansion, adding to the more than 1.3 million Australians already using CDR-enabled services.
"The expansion of the Consumer Data Right to non-bank lenders is a significant step in giving consumers access to information about the broadest possible range of financial products." — Dr Ian Oppermann, ACCC Commissioner
For years, this kind of data sharing only applied to the big four banks. Non-bank lenders — often the first port of call for businesses that don't fit a traditional bank's risk model — sat outside the framework entirely. That's what's changed: the same infrastructure that lets your banking app pull in transaction data now extends to the lenders small businesses actually use most often for fast, flexible finance.
The Problem With Small Business Lending Today
Applying for finance from a non-bank lender or BNPL provider today typically means repeatedly supplying the same bank statements, tax returns and cash flow figures to every lender you compare — a manual process that's slow, error-prone, and easy to get stuck in.
A missing document or an unclear transaction can stall an application for days while you go back and forth with an underwriter. For a business that's stretched for time, that uncertainty is expensive — you can't commit to inventory, equipment or a new contract if you don't know when funding will land.
Pro tip
Pro tip: Before you start comparing lenders, pull your own last three months of bank statements and reconcile them yourself. Lenders under the new open banking rules will still cross-check what they receive against your actual bookkeeping — clean records get you through underwriting faster regardless of how the data arrives.
There's also a competitive cost to all this friction. Because manually processing every application is expensive for lenders, that cost has historically been passed on through higher fees for the non-bank and alternative finance products many small businesses rely on when a bank says no. Removing the manual document-chasing step is what the CDR expansion is actually trying to fix.
What Open Banking Data Sharing Actually Changes
Once a lender can request your data with consent instead of waiting for you to gather and upload it, three things change: serviceability checks get faster, product comparisons get more accurate, and you stop repeating yourself for every new application.
A lender that can pull your transaction history directly — with your permission — can assess income, expenses and cash flow stability without waiting on a document upload. From 13 July 2026, lenders must also share their own rates, fees and eligibility criteria through the CDR, so comparison tools can show you the full cost of a loan side by side, not just the headline rate.
None of this happens without an infrastructure layer most business owners will never deal with directly. Frollo and Basiq are ACCC-accredited open banking platforms that lenders and fintechs use to access CDR data for income verification and account aggregation — they aren't lenders themselves, but they're the technical bridge that makes fast, consent-based data sharing work in practice.
If you want to see what this looks like once it reaches your own tech stack, our guide on modernising your business's tech stack covers how AI-powered finance and accounting tools plug into exactly this kind of data infrastructure.
The Rollout Timeline: What's Live Now vs What's Coming
As of today, product data sharing from non-bank lenders is already live, but full consumer transaction-data sharing is still being phased in over the next eight months and beyond — so the practical benefits will arrive in stages rather than all at once.
| Phase | Date | What it covers | Who it applies to |
|---|---|---|---|
| Product data sharing | 13 July 2026 | Rates, fees, charges, eligibility criteria | Initial and large non-bank lender providers |
| Consumer data sharing | 9 November 2026 | Transaction/account data (with consent) | Initial providers (over $10bn in loans/leases) |
| Consumer data sharing | 10 May 2027 | Transaction/account data (with consent) | Large providers (over $1bn in loans/leases, 1,000+ customers) |
The staggered dates exist because the largest non-bank lenders need more lead time to build compliant data-sharing infrastructure, according to MinterEllison's analysis of the CDR Rules Version 8 phase-in. Practically, this means comparison shopping on price gets easier first (from July 2026), while the bigger win — skipping manual document uploads entirely — won't be fully available across the market until mid-2027.
How Small Business Owners Should Get Ready
The most useful thing you can do now is ask two questions before you apply for finance: does this lender support CDR data sharing, and does my own accounting software already connect to it? Getting ahead of this saves real time on your next application.
Check with your accountant or software provider whether your platform has a roadmap for open banking integration — several mainstream Australian accounting platforms are already moving in this direction. When you approach a lender, ask directly whether they're CDR-accredited or use accredited infrastructure like Frollo or Basiq; a lender that isn't ready for open banking will still put you through the old manual process.
You're also entitled to control how your data is used. Consent under the CDR isn't a one-off event — you can review what's being shared and revoke access at any time, so it's worth reading the consent screen rather than clicking through it.
Marketplace platforms are one practical way to test the waters. Valiant Finance, a Sydney-founded small business loan marketplace matching businesses with a panel of 90+ bank and non-bank lenders, has facilitated more than $2.5 billion in loans to roughly 20,000 Australian businesses — an example of the kind of comparison-driven model that gets more powerful once full data sharing is live. If your own numbers aren't in good shape, our AI finance tools guide and accounts receivable automation piece are good starting points before you apply anywhere.
Mistakes and Risks to Watch For
Pro tip
Common mistake: assuming a "CDR-accredited" lender automatically means better value. Accreditation is a data-security and privacy standard, not a pricing guarantee — you still need to compare the full cost of borrowing yourself.
The single biggest mistake is treating open banking as a substitute for good bookkeeping. Faster data sharing doesn't fix messy, uncategorised transactions — it just moves bad data to the lender faster. Our AI readiness audit walks through the basics of getting your financial systems in order before you lean on any automated process.
The second risk is not reading what you're actually consenting to. Some data-sharing arrangements request broader access, or for longer, than you might expect — check the scope and duration before you approve it, and don't be afraid to ask a lender to narrow the request. Finally, treat security as your responsibility too: only share data through platforms you've confirmed are CDR-accredited, and be wary of any provider that asks you to bypass that process for a "faster" manual workaround.
Where This Leaves Small Business Borrowers
The practical takeaway is straightforward: this is infrastructure, not a shortcut. It rewards businesses that keep clean financial records with faster approvals and clearer comparisons — it doesn't do that work for you.
As more non-bank lenders and BNPL providers come online through 2026 and 2027, expect more competition on price and turnaround time, particularly from lenders that previously couldn't compete with banks on speed. That's a genuine opportunity for small businesses that have historically had fewer, more expensive options outside the major banks.
If you're weighing up how AI and data-sharing tools fit into your broader finance operations, that's exactly the kind of practical technology assessment we help clients work through at GrowthGear — matching the right tools to how your business actually gets paid and pays its bills, not just what's newest.
| Question | What to check |
|---|---|
| Is my lender CDR-accredited? | Ask directly, or check if they use Frollo/Basiq infrastructure |
| What's actually being shared? | Read the consent screen — scope and duration, not just "yes/no" |
| Can I revoke consent? | Yes, at any time — this is a CDR requirement, not optional |
| Does accreditation mean best price? | No — compare total cost of borrowing separately |
| When does this fully apply to me? | Product data now (Jul 2026); full data sharing by Nov 2026-May 2027 depending on lender size |
Frequently Asked Questions
The Consumer Data Right (CDR) is Australia's open banking framework, regulated by the ACCC, letting you direct your financial data to accredited providers. It now extends to non-bank lenders, so the same consent-based data sharing applies to business loan and BNPL applications, not just bank accounts.
Product data sharing (rates, fees, eligibility) began 13 July 2026. Full transaction-data sharing starts 9 November 2026 for the largest non-bank lenders, and 10 May 2027 for smaller large providers.
No. Data sharing under the CDR is entirely consent-based — you choose whether to share your data with a lender, and you can revoke that consent at any time.
The expansion covers non-bank mortgage lenders, car finance providers, personal loan providers, and Buy Now Pay Later (BNPL) providers — sectors that previously sat outside Australia's open banking rules.
No. Accreditation confirms a lender meets data-security and privacy standards for handling your information — it says nothing about pricing. You still need to compare interest rates, fees and total borrowing costs yourself.
Ask any prospective lender whether they're CDR-accredited, check if your accounting software already supports data sharing, and make sure your bookkeeping is accurate and up to date — clean records are what actually speeds up approval.
Sources & References
- ACCC — "The expansion of the Consumer Data Right to non-bank lenders is a significant step..." (2026)
- MinterEllison — CDR Rules Version 8 phased rollout timeline for non-bank lenders (2026)
- SmartCompany — Valiant Finance small business lending marketplace milestone (2026)
- Frollo — ACCC-accredited open banking infrastructure for lenders (2026)
Data sharing standards and lender readiness will keep evolving as the November 2026 and May 2027 milestones approach — see our AI Implementation Playbook for more on preparing your business's broader technology stack for changes like this one. For related reading, see our coverage of AI data security practices, data privacy compliance for Australian businesses, and how faster data flows into CRM and deal systems.
