CBA Faces $524,000 Penalty for Breaching Consumer Data Rules
Commonwealth Bank of Australia (CBA) has paid A$792,000 (around $524,462.40) after breaching the country’s consumer data rules. The Australian Competition & Consumer Commission (ACCC) issued four infringement notices for failing to comply with the Consumer Data Right (CDR) Rules. These rules allow consumers to share their data with accredited third parties, helping them find better deals on services and products.
The ACCC found that CBA failed to enable data sharing for some business and partnership accounts. This caused delays and prevented consumers from using CDR-enabled services. As a result, many were unable to access the deals they were entitled to.
The Highest Penalty for CDR Breach
This penalty is the highest to date for a CDR breach. ACCC Deputy Chair Catriona Lowe said the fine should serve as a warning. “Failure to follow the rules can lead to enforcement action,” Lowe added. The ACCC is making it clear that consumer data protection is non-negotiable. Banks and businesses must follow the rules to avoid similar penalties.
CBA’s Response and Remediation
CBA admitted the breach and voluntarily reported the issue to the ACCC. The bank has accepted the findings and is working on improvements. CBA will contact affected customers to let them know they may be eligible for remediation. Additionally, the bank is taking steps to strengthen its internal systems to prevent such breaches in the future.
Read Also
Comerica-Fifth Third Lawsuit
MoneyLion Lawsuit Settlement
A Growing Concern for Banks
CBA is not the only bank to face penalties for breaching CDR rules. Earlier this year, National Australia Bank (NAB) was fined A$751,200 for a similar issue. Lowe pointed out that banks have had enough time to understand and comply with CDR regulations. “Banks must ensure compliance,” Lowe said. The penalties show the increasing scrutiny on data handling in the financial sector. The message is clear: banks must handle consumer data with care.
Looking Forward
The CBA consumer data penalty highlights the ongoing challenges in the banking sector. It shows that financial institutions need to prioritize data protection and transparency. As the banking industry evolves, regulators like the ACCC will continue to enforce strict compliance. Banks must adjust to meet these requirements. They need to adopt better data-sharing systems to avoid penalties and maintain consumer trust.