Open Banking
Your data, your way
Open Banking gives you greater control of your banking data. It was introduced after the Australian Government passed legislation, called the Consumer Data Right (CDR). Open Banking is designed to give you more choice with your banking, and to make it easier to access new products and services.
To access Hume Bank’s CDR policy, see this document.
You can find more information about Open Banking on the Australian Government’s Consumer Data Right website.
Is it safe to share your data?
Protecting your information and privacy is our priority. Open Banking has privacy protections in place to help you share your data safely and securely. These protections include:
- Choice: It’s your choice to participate in Open Banking. Sharing your data with an accredited data recipient is by opt-in only.
- Control: You’re in control. You can manage which data you want to share via iBank, including cancelling permissions at any time. You can also ask an accredited data recipient to delete any data you have shared with them.
- Accreditation: Your data will be sent to an accredited data recipient through a secure connection. This connection is governed by strict terms and conditions defined by the Australian Government about how your data must be secured.
- Time-limit: Accredited data recipients can only access your data for up to 12 months. After 12 months, you will need to re-authorise their access.
Information for developers
Open Banking allows developers to build apps and other services which access data held by financial institutions like Hume Bank, through use of Application Program Interfaces (APIs). Our APIs have been developed in accordance with the Consumer Data Standards imposed by the Australian Government.
The Hume Bank API provides access to information about our retail and business deposit and credit card products. Hume Bank’s Product API (for developers) is available here.
Frequently asked questions
What is Data Sharing?
Data Sharing allows you to share selected data from your nominated accounts with an Accredited Data Recipient to use the services they offer. An Accredited Data Recipient will provide a Consent Request service that allows you to securely connect to Hume Bank to authorise us to share your data with that Data Recipient.
Only data you authorise us to share will be available to your Accredited Data Recipient and will only be shared for the period you consent to, up to 12 months. The Accredited Data Recipient will have policies and procedures in place as to how your data is used and what happens to that data when you stop sharing that data.
You may exit from the consent process at any time prior to approval and you will be returned to your Accredited Data Recipient’s website.
What are Data Groups?
Data Groups or Clusters allow you to authorise sharing of data within groups of related data. These data groups are presented under Cluster headings in our Consent Authorisation workflow and within your Consumer Dashboard. Each Cluster can be expanded to provide you with a list of the specific data you are authorising, or have authorised, to share.
What happens to my data?
Once you have authorised Hume Bank to share your data, we will share the selected data with your Data Recipient on the agreed frequencies. Your Accredited Data Recipient will use the data to provide the services or products that you have consented to. Your data may either be deleted or de-identified when it is no longer required. Your Accredited Data Recipient will have specific policies in place for how they handle your data once it’s no longer required. If you have questions about this, reach out directly to your Accredited Data Recipient.
What is an Accredited Consumer Data Right Recipient?
An Accredited Consumer Data Recipient is an organisation accredited by the Australian Competition and Consumer Commission (ACCC). Accredited Consumer Data Recipients will only be able to access your data if you provide your consent. In consenting to share data you will be able to authorise the data you want to share with your selected Accredited Data Recipient. You can also stop sharing at any time via your Consumer Dashboard with the Accredited Data Recipient, your Hume Bank dashboard or in writing.
Why can’t I share accounts?
Some business-related accounts, closed accounts or blocked accounts may not be eligible for Consumer Data Sharing. Account Holder age limits are also applied when determining if an account is available to share.
What is a Consumer Dashboard?
Hume Bank provides you with a Consumer Dashboard where you are able to review all your Data Sharing arrangements. You can also request us to stop sharing your data. This dashboard is available within iBank.
How can I withdraw my Consent?
You may stop sharing your data at any time via your Consumer Dashboard or by calling or writing to us. You may also stop sharing by notifying your Accredited Data Recipient. Note: If you stop sharing your data the services provided as a result of this sharing arrangement may be impacted. You should check with your Accredited Data Recipient before you stop sharing your data to understand the consequences.
How can I manage my Accounts Sharing Status?
Open Banking Consent Management in your Consumer Dashboard allows you to change the sharing status of accounts previously selected during consent authorisation. Changing approval status of eligible accounts can be performed in the Accounts Shared section of an active sharing arrangement on your Consumer Dashboard.
This will allow you to withdraw sharing approval for an existing account, or reinstate sharing of a withdrawn account approval at a later time. These changes will only be applied to the sharing arrangement being maintained. Only accounts that are currently eligible for data sharing will allow sharing to be withdrawn or reinstated.
Sharing status of a joint account may be withdrawn by any joint owner of the account, but only the account holder performing the approval withdrawal will have the ability to reinstate sharing. Sharing of joint accounts can only be reinstated if sharing is still approved by all account holders in the Joint Account Service.
You should consider the impact of withdrawing account sharing approval on the services being provided by your Accredited Data Recipient before updating the status of any account.
How can you correct or amend your Hume Bank CDR data?
You have the right to have your Hume Bank CDR Data corrected if it is inaccurate, out of date, incomplete, irrelevant, or contains misleading information. This service is provided free of charge.
Please contact us if you believe there is an issue with your Hume Bank CDR Data. We will aim to respond within 10 business days of receiving your request.
If we do not correct your CDR Data, we will provide you with reasons for this decision. If you feel your concerns have not been adequately addressed, you may file a complaint.
You also have the right to access and correct personal information held by Hume Bank about you. For more information, please refer to our Privacy Policy.