What agreements are part of on-boarding to the Consumer Data Right?

Public Key Infrastructure (PKI) certificates are a key component used in the Consumer Data Right ecosystem (the ecosystem) to provide secure and private communications between participants. The ACCC, as the Consumer Data Right Registrar (the Registrar), is responsible for issuing certificates to participants.

The procedural and operational requirements relating to the use of the digital certificates issued to participants are governed by two agreements: the Subscriber and Relying Party Agreements. 

Subscriber Agreement

The Subscriber Agreement establishes the basis on which digital certificates are issued to participants. Subscriber Agreements also establish the role subscribers are required to play in safeguarding and managing certificates issued to them to maintain the overall integrity, security and stability of the Consumer Data Right Register.

Relying Party Agreement

The Relying Party Agreement demonstrates a participant’s agreement to the ACCC Certificate Policy. This is a detailed outline of the certificate’s terms and conditions of use and the basis on which participants rely on the integrity of an ACCC digital certificate.

More information will be provided to each participant about the use of certificates in the ecosystem:

• A Certificate Policy document defines how the ACCC, as Registrar, intends to manage its PKI accounts and establishes the terms and conditions of participants’ use.
• A Certification Practice Statement is a detailed procedural document describing how the ACCC, as Registrar, intends to implement its Certificate Policy.

Consumer Data Right Logo Licensing Agreement

To use the Consumer Data Right logo (the logo), participants must sign the Consumer Data Right Trade Mark Licence Agreement, which sets out the terms and conditions of the logo’s use. 

The logo is intended to be a symbol of trust in the ecosystem. The ACCC encourages all participants to use the logo in the consent and authorisation processes provided to consumers. In the future, the ACCC expects that the Consumer Data Right Rules and Consumer Experience Standards and Guidelines may provide additional requirements or recommendations regarding the use of the logo.

More information

The CDR website has more information on agreements relevant to participants.