The Customer and Product Data Act 2025 (CPDA2025) received Royal assent on 29 March 2025 and is now in force. At its core, CPDA2025 is a data portability framework — empowering consumers and boosting innovation:
🔐 Consumers can now access and share their data with accredited third parties – similar to Australia’s CDR model.
🏛️ Sector-specific regulations will follow.
🏦 Banking is first (by the end of 2025), with Electricity and others next.
⚙️ Introduces “action initiation” – accredited entities can act on a customer’s behalf (e.g., initiate payments).
👥 Applies to both customer data (personal info, e.g., bank transactions) and product data (e.g., pricing, product features).
⚖️ Backed by civil penalties, dispute resolution, and strong consumer protections.
🌐 Has extraterritorial scope – applies to NZ-based and overseas businesses operating in NZ.
📢 A major milestone for data portability, consumer empowerment, and digital competition in Aotearoa.
📄 Read the Act on the NZ Legislation portal
Leave a Reply