What is open banking?

Open banking is a service that gives you greater access to and control of information relating to your banking products and services.

You can opt into the service to share banking information between accredited third parties. This makes it easier for you to manage, compare and switch banking products and services.

Open banking is part of new legislation passed by the Australian Government in 2019 called Consumer Data Right (CDR), opens in new window. The aim of the legislation is to increase competition between major banks, other financial institutions and accredited third parties.

Australia’s banking sector is the first to apply the CDR legislation, but the energy and telecommunications sectors will follow.

To find out who is accredited by the ACCC to receive data through open banking, take a look at the Australian Competition and Consumer Commission, opens in new window website.

Types of information you can share

Once you have opted-in to open banking, you can securely share your account summary, balances and transaction history for eligible personal and business banking products such as:

  • credit or debit cards
  • term deposits
  • transaction and savings accounts
  • home loans (mortgages)
  • personal loans
  • business loans.

How to share your data

Open banking is an opt-in process. NAB Connect users can access open banking by using their Internet Banking NAB ID. This is how it works.

Agree to share information with a third party

To provide you with a new or improved service, an accredited third party may ask you to share your banking information with them.

They’ll tell you what data they need, and how long they want you to share it for. This may be once-off, or ongoing data sharing for up to 12 months.

Choose which information to share

To share this data, you’ll be redirected to NAB. Follow the prompts that appear on the screen.

  1.  Enter your NAB ID. If you are a NAB Connect user, you can register for Internet Banking online or via your business banker.
  2. A one-time password will be sent to your SMS security registered phone number. You’ll never be asked to enter your NAB Internet Banking password to share your data.
  3. Enter this one-time password and follow the prompts to confirm what data you’d like to share.
  4. We’ll share your data with that organisation using a secure connection.

Is open banking safe to use?

Yes, there are strict rules and security protocols in place to protect your information.

Strict accreditation criteria

To request access to your data through open banking, third parties must be accredited by the Australian Competition and Consumer Commission (ACCC). They have set strict accreditation criteria, as well as privacy and information security standards.

One-time password verification

You’ll never need to give your NAB banking password to a third party. If you choose to share your banking data with an accredited open banking participant, a one-time password will be sent to you via SMS to your security-registered phone number to help identify you.

Secure transmission process

Once you have been identified, your data will be transmitted to the third party through a secure connection. This connection is governed by strict terms and conditions defined by the ACCC on how your data must be secured.

For tips on how to stay safe online when using open banking, visit our security tips hub.

How to stop sharing your data

You’ll have full control of this data sharing. Your data can’t be shared without your consent and you can stop sharing at any time.

Using NAB Internet Banking

  1. Log into NAB Internet Banking with your NAB Identification Number (NIN) and NAB Internet Banking password.
  2. From the main menu, click Profile & Settings and select Data sharing permissions from the drop-down list.
  3. Open the accredited third party from the list displayed on the ‘Data sharing permissions’ screen and select the Stop Sharing button.
  4. Confirm the details are correct and select the Stop Sharing button again.

Using the NAB app

  1. Log into the NAB app.
  2. From the menu, select Settings, then select Permissions and select Data sharing permissions.
  3. Open the accredited third party from the list displayed on the ‘Data sharing permissions’ screen and select the Stop Sharing button.
  4. Confirm the details are correct and select the Stop Sharing button again. 

If you don’t have an SMS security-registered phone number, call the Internet Banking Support Team on 1300 651 656 in Australia, (or +61 3 8641 9886 from overseas) Monday to Friday, 7:00am to 9:00pm (AEST/AEDT) and Saturday to Sunday, 9:00am to 6:00pm (AEST/AEDT).

Deleting your data

If you decide to stop sharing your data, the accredited third party will give you the option to delete your data from their records. If you don’t choose to have it deleted, or in cases where it can’t be deleted, the accredited third party will delete any identifiable data.

Implementation gaps

NAB is continually reviewing its data sharing under the CDR. To learn more about implementation gaps that we’re rectifying, please refer to Rectification schedule - active data holders with implementation gaps | Consumer Data Right (cdr.gov.au), opens in new window

Frequently asked questions

  • You can see who you are sharing your data with, and what information they have accessed using NAB Internet Banking.

    Using NAB Internet Banking 

    1. Log into NAB Internet Banking with your NAB Identification Number (NIN) and NAB Internet Banking password.
    2. From the main menu, click the Profile & Settings menu and select ‘Data sharing permissions’ from the drop-down list.
    3. The ‘Data sharing permissions’ screen displays a list of all the accredited third parties you are sharing data with now and who you have shared with in the past.
    4. You can also click on an accredited third party to view its details. This information will include the data you are sharing for which accounts, and when your consent to share this data expires.

    Using the NAB app

    1. Log into the NAB app.
    2. From the menu, select Settings, then select Permissions and select Data sharing permissions.
    3. The ‘Data sharing permissions’ screen displays a list of all the accredited third parties you are sharing data with now and who you have shared with in the past.

    Important:

    To ensure your data is kept safe, data sharing will stop when your consent expires and the accredited third party will either delete or de-identity your data.

  • Under the Consumer Data Right legislation, we will not charge you to share your data with an accredited third party.

    We won’t charge an accredited third party to access your data either.

  • Open banking is available to eligible:

    • single account holders
    • sole traders
    • joint account holders over the age of 18
    • all authorised users on individually owned accounts who are nominated for NAB Internet Banking access (via the Internet Banking and Telephone Banking Authorised User Nomination form)
    • all authorised users on business owned accounts who are nominated for NAB Internet Banking access (via the Internet Banking and Telephone Banking Authorised User Nomination form).

  • Under open banking, the following data can be shared by authorised users: 

    • account list
    • transaction list and details
    • account balances
    • direct debits
    • scheduled payments
    • customer details (only authorised user details will be shared)
    • organisation details including your business ABN, business address and contact details. 

  • Any existing and new nominated authorised users appointed by individual account owners will be able to provide consent to share data in relation to the accounts for which they are authorised.
    Please note that an authorised user can only see and manage consents created by them. If an authorised user creates a consent which includes nominated individual accounts, the individual account owners will also be able to see the consent details related to the nominated accounts in their respective internet banking. 

    Important: 
    If you want to remove an authorised user, it’s your responsibility to tell us to withdraw the nomination of the user.

  • Any existing and new nominated authorised users appointed by your business owners will be able to provide consent to share the data in relation to the accounts for which they are authorised.
    Please note that an authorised user can only see and manage consents created by them. Therefore, if one of your authorised users creates a consent, you will not be able to see this in your internet banking. 

    Important:
    If an authorised user leaves your organisation, it’s your responsibility to direct us to withdraw the nomination of the user.

  • If you decide not to participate in open banking, you will need to remove all current authorisations for the nominated users. If you chose to remove nominated users at this stage, it will result in the users losing access to other internet banking functionality as well. This is a temporary way to manage authorisations for open banking and in future it will provide open banking specific authority to manage data sharing. 

  • Yes, joint account holders over the age of 18 can share their account summary, balance, transaction history, and personal account information such as mail address, payees, scheduled payments and direct debits for accounts such as:

    • credit or debit cards
    • term deposits
    • transaction and savings accounts
    • personal loans
    • home loans (mortgages).

    This data sharing is also available for single-account owners and sole traders.

  • Giving your NAB Internet Banking password to a third-party breaches NAB's Internet Banking terms and conditions.

    There are different types of data sharing environments, such as screen scraping technology (using your NAB ID number and banking password) versus data sharing in the open banking environment.

    When you use open banking, you won't be asked for your banking password. A one-time password will be sent to your phone instead.

    The open banking environment is a safe and secure way to share your information, and doing it this way doesn't breach NAB's Internet Banking terms and conditions. Both types will coexist for a while, so it's worth being aware of which one you are using.

  • Yes, any account owners and/or nominated authorised users with NAB Internet Banking or NAB app access will be able to provide consent to share the data in relation to the accounts for which they are authorised.

  • You can share data for accounts closed less than two years ago.

  • For more information about the Consumer Data Right, take a look at the Australian Competition and Consumer Commission, opens in new window website.

    Read our CDR Complaints and Access Policy if you need to:

    • access or correct your CDR data that we hold about you
    • learn more about how you can seek access and correction of CDR Data that we hold about you
    • make a complaint about how we handle your CDR Data

    If you’re a developer, visit our developer portal, opens in new window for more information about NAB’s Open Banking APIs.

    View our security hub for tips on staying safe online.

    • If you need help setting up to share data for personal banking, call our contact centre on 13 22 65 Monday to Friday, 8:00am to 7:00pm (AEST/AEDT) and Saturday to Sunday, 9:00am to 6:00pm (AEST/AEDT). If you’re d/Deaf or find it hard to hear or speak to hearing people on the phone, the National Relay Service, opens in new window can help. To contact NAB give our phone number 13 22 65 to the National Relay Service operator when asked.
    • If you need help setting up to share data for business banking, call our contact centre on 13 10 12 Monday to Friday, 8:00am to 8:00pm (AEST/AEDT), Saturday to Sunday, 9:00am to 6:00pm (AEST/AEDT) .

Important information