Open banking | How to opt-in and securely share your bank data - NAB

What is open banking?

Open banking is a service that gives you greater access to and control of information relating to your banking products and services.

You can opt into the service to share banking information between accredited third parties. This makes it easier for you to manage, compare and switch banking products and services.

Open banking is part of new legislation passed by the Australian Government in 2019 called Consumer Data Right (CDR). The aim of the legislation is to increase competition between major banks, other financial institutions and accredited third parties.

To find out who is accredited to receive data through open banking, take a look at the Consumer Data Right (CDR) website.

What information can you share?

Once you have opted-in to open banking, you can securely share your banking data, e.g., account summary, balances, and transaction history for CDR-eligible personal and business banking products such as:

  • credit cards
  • term deposits
  • transaction and savings accounts
  • home loans (mortgages)
  • personal loans
  • business loans.

Is open banking safe?

Yes, there are strict rules and security protocols in place to protect your information.

Strict accreditation criteria

To request access to your data through open banking, third parties must be accredited by the Australian Competition and Consumer Commission (ACCC). They have set strict accreditation criteria, as well as privacy and information security standards.

One-time password verification

You’ll never need to give your NAB banking password to a third party. If you choose to share your banking data with an accredited open banking participant, a one-time password will be sent to you via SMS to your security-registered phone number to help identify you.

Secure transmission process

Once you have been identified, your data will be transmitted to the third party through a secure connection. This connection is governed by strict terms and conditions defined by the ACCC on how your data must be secured.

For tips on how to stay safe online when using open banking, visit our security tips hub.

CDR and Open Banking Data Sharing for NAB Customers

CDR data sharing is available for both personal and business customers through our primary digital platform, NAB Internet Banking. Existing retail and business-nominated representatives with NAB Internet Banking access will be able to share their respective accounts through Open Banking.

Customers currently using NAB Connect will need to register for Internet Banking to access CDR data sharing services.

How to register for Internet Banking

Personal customers can register via NAB Internet Banking or call 13 22 65, (+61 3 8641 9083  from overseas) Monday to Friday, 7:00am to 9:00pm (AEST/AEDT), Saturday to Sunday, 9:00am to 6:00pm (AEST/AEDT).

If you’re a business customer, you can speak to your business banker or call us on 13 10 12, (+61 3 8641 9083) from overseas, Monday to Friday, 8.00am to 8.00pm, Saturday to Sunday 9.00am to 6.00pm (AEST/AEDT).

How to share data:

  1. An accredited third-party provider will ask for your permission to access data from your NAB accounts via their mobile app or website. They’ll specify what data is needed and for how long, which may be a one-time event or ongoing for up to 12 months. Visit the Consumer Data Right (CDR) website to view accredited third parties.
  2. If you consent to share your data, you’ll be redirected to us, where you’ll need to enter your NAB ID.
  3. A one-time password (OTP) will be sent to your SMS registered mobile phone number. Please note, you’ll never be asked to enter your NAB Internet Banking password to share your data for open banking.
  4. Enter your one-time password and follow the prompts to confirm which accounts you’d like to share data for.
  5. Once you’ve consented, we’ll share your chosen data with the third-party provider using a secure connection.
  6. You can view your CDR consent details in NAB Internet banking or the NAB app under the Data sharing permissions section.

How to stop sharing your data

You’ll have full control of this data sharing. Your data can’t be shared without your consent and you can stop sharing at any time.

Using NAB Internet Banking

  1. Log into NAB Internet Banking with your NAB ID and NAB Internet Banking password.
  2. From the main menu, click Profile & Settings and select Data sharing permissions from the drop-down list.
  3. Open the accredited third party from the list displayed on the ‘Data sharing permissions’ screen and select the Stop Sharing button.
  4. Confirm the details are correct and select the Stop Sharing button again.

Using the NAB app

  1. Log into the NAB app.
  2. From the menu, select Settings, then select Permissions and select Data sharing permissions.
  3. Open the accredited third party from the list displayed on the ‘Data sharing permissions’ screen and select the Stop Sharing button.
  4. Confirm the details are correct and select the Stop Sharing button again. 

If you don’t have an SMS security-registered phone number, call the Internet Banking Support Team on 13 22 65 in Australia, (or +61 3 8641 9083 from overseas) Monday to Friday, 7:00am to 9:00pm (AEST/AEDT) and Saturday to Sunday, 9:00am to 6:00pm (AEST/AEDT).

Deleting your data

If you decide to stop sharing your data, the accredited third party will give you the option to delete your data from their records. If you don’t choose to have it deleted, or in cases where it can’t be deleted, the accredited third party will delete any identifiable data.

Implementation gaps

NAB is continually reviewing its data sharing under the CDR. To learn more about implementation gaps that we’re rectifying, please refer to Rectification schedule - active data holders with implementation gaps | Consumer Data Right (cdr.gov.au)

Frequently asked questions

  • You can see who you are sharing your data with, and what information they have accessed using NAB Internet Banking.

    Using NAB Internet Banking 

    1. Log into NAB Internet Banking with your NAB ID and NAB Internet Banking password.
    2. From the main menu, click the Profile & Settings menu and select ‘Data sharing permissions’ from the drop-down list.
    3. The ‘Data sharing permissions’ screen displays a list of all the accredited third parties you are sharing data with now and who you have shared with in the past.
    4. You can also click on an accredited third party to view its details. This information will include the data you are sharing for which accounts, and when your consent to share this data expires.

    Using the NAB app

    1. Log into the NAB app.
    2. From the menu, select Settings, then select Permissions and select Data sharing permissions.
    3. The ‘Data sharing permissions’ screen displays a list of all the accredited third parties you are sharing data with now and who you have shared with in the past.

    Important:

    To ensure your data is kept safe, data sharing will stop when your consent expires and the accredited third party will either delete or de-identity your data.

  • Under the Consumer Data Right legislation, we will not charge you to share your data with an accredited third party.

    We won’t charge an accredited third party to access your data either.

  • Open banking is available to eligible:

    • single account holders
    • sole traders
    • joint account holders over the age of 18
    • all authorised users on individually owned accounts who are nominated for NAB Internet Banking access (via the Internet Banking and Telephone Banking Authorised User Nomination form)
    • all authorised users on business owned accounts who are nominated for NAB Internet Banking access (via the Internet Banking and Telephone Banking Authorised User Nomination form).
  • Under open banking, the following data can be shared by authorised users: 

    • account list
    • transaction list and details
    • account balances
    • direct debits
    • scheduled payments
    • customer details (only authorised user details will be shared)
    • organisation details including your business ABN, business address and contact details. 
  • Any existing and new nominated authorised users appointed by individual account owners will be able to provide consent to share data in relation to the accounts for which they are authorised.
    Please note that an authorised user can only see and manage consents created by them. If an authorised user creates a consent which includes nominated individual accounts, the individual account owners will also be able to see the consent details related to the nominated accounts in their respective internet banking. 

    Important: 
    If you want to remove an authorised user, it’s your responsibility to tell us to withdraw the nomination of the user.

  • Any existing and new nominated authorised users appointed by your business owners will be able to provide consent to share the data in relation to the accounts for which they are authorised.
    Please note that an authorised user can only see and manage consents created by them. Therefore, if one of your authorised users creates a consent, you will not be able to see this in your internet banking. 

    Important:
    If an authorised user leaves your organisation, it’s your responsibility to direct us to withdraw the nomination of the user.

  • If you decide not to participate in open banking, you will need to remove all current authorisations for the nominated users. If you chose to remove nominated users at this stage, it will result in the users losing access to other internet banking functionality as well. This is a temporary way to manage authorisations for open banking and in future it will provide open banking specific authority to manage data sharing. 

  • Yes, joint account holders over the age of 18 can share their account summary, balance, transaction history, and personal account information such as mail address, payees, scheduled payments and direct debits for accounts such as:

    • credit or debit cards
    • term deposits
    • transaction and savings accounts
    • personal loans
    • home loans (mortgages).

    This data sharing is also available for single-account owners and sole traders.

  • Giving your NAB Internet Banking password to a third-party breaches NAB's Internet Banking terms and conditions.

    There are different types of data sharing environments, such as screen scraping technology (using your NAB ID number and banking password) versus data sharing in the open banking environment.

    When you use open banking, you won't be asked for your banking password. A one-time password will be sent to your phone instead.

    The open banking environment is a safe and secure way to share your information, and doing it this way doesn't breach NAB's Internet Banking terms and conditions. Both types will coexist for a while, so it's worth being aware of which one you are using.

  • No, from March 2025, Foreign Currency Accounts are no longer included in Consumer Data Right (CDR) data sharing.

  • No, from March 2025, closed accounts are not eligible for data sharing under Consumer Data Right (CDR) rules. Only active accounts can be shared, and any existing consents for closed accounts will automatically expire.

  • For more information about the Consumer Data Right, take a look at the Australian Competition and Consumer Commission website.

    Read our CDR Complaints and Access Policy if you need to:

    • access or correct your CDR data that we hold about you
    • learn more about how you can seek access and correction of CDR Data that we hold about you
    • make a complaint about how we handle your CDR Data

    If you’re a developer, visit our developer portal for more information about NAB’s Open Banking APIs.

    View our security hub for tips on staying safe online.

    • If you need help setting up to share data for personal banking, call our contact centre on 13 22 65 Monday to Friday, 8:00am to 7:00pm (AEST/AEDT) and Saturday to Sunday, 9:00am to 6:00pm (AEST/AEDT). If you’re d/Deaf or find it hard to hear or speak to hearing people on the phone, the National Relay Service can help. To contact NAB give our phone number 13 22 65 to the National Relay Service operator when asked.
    • If you need help setting up to share data for business banking, call our contact centre on 13 10 12 Monday to Friday, 8:00am to 8:00pm (AEST/AEDT), Saturday to Sunday, 9:00am to 6:00pm (AEST/AEDT) .

Important information