Consumer Data Right (CDR)

What is Consumer Data Right?

Consumer Data Right is an Australian Government initiative that lets you securely share the data a business already holds about you with other businesses you choose. It’s designed to make it easier to compare products, apply for financial services and find options that better suit your needs.

It’s an opt-in system, so nothing is shared unless you decide to share it. You control who can access your data, what they can see, how it’s used and how long. You can also withdraw your consent at any time.

CDR sets out clear rules for how information is shared. Businesses that want to receive your data must first be approved through the Australian Competition and Consumer Commission’s (ACCC) accreditation process, which requires them to follow strict privacy and security rules. These approved businesses are known as accredited data recipients.

Devizo Finance Pty Ltd (ACN 622 104 527) trading as Payright (‘Payright’) has a different role. As an organisation that holds customer information, Payright is known as a data holder. Payright may be required to share certain data with accredited recipients, but only when you authorise it.

What information can be shared?

There are two types of data that can be shared under CDR.

  • Product data – information about Payright products, such as interest rates, fees and product features. This is generally already available on our website.
  • Consumer data – information relating to your account, such as account details, balances and transaction history.

What are Payright’s obligations under CDR?

CDR has been rolled out by the ACCC in stages. First, it the banking sector, then energy, and from 13 July 2027 to the non-bank lending sector.

Payright is a non-bank lender and part of the Metrics Group of companies. As part of this broader corporate group, Payright has been granted an exemption by the ACCC from sharing required CDR data until:

  • 30 June 2027 for Product Data
  • 30 June 2028 for Consumer Data

Further details about this exemption are available on the ACCC’s Consumer Data Right Exemptions Register, where it is listed under Metrics Credit Holdings Pty Ltd.

What does this mean for you?

There is no action required from you.

You can continue to access information about our products on our website and manage your account through your existing channels, just as you do today.

This exemption does not affect your privacy rights or your ability to request information about your account directly from us. For more information on how Payright manages your privacy, see our Privacy Policy.

We’ll provide further updates before CDR services become available.

Please note: CDR data sharing is only available on eligible, online-active accounts held by individuals aged 18 or over. To check your eligibility or learn more about how the program works, visit the Australian Government’s Australia’s Consumer Data Right website.

Questions?

If you have any questions or would like to understand more about Consumer Data Right, you can contact us by:

Complaints & feedback

If you would like to provide feedback or make a complaint regarding how we handle your data under the Consumer Data Right, please contact us by:

  • Phone: 1300 338 496; or
  • Email: care@payright.com.au; or
  • Mail: Privacy Officer
    Navalo Financial Services Group Limited
    Level 9, 101 Collins Street
    Melbourne VIC 3000
    Australia

We will manage your complaint in accordance with our complaints policy.