CDR Energy sector — phased
Energy retailers + distributors must share data via CDR.
Who must comply
Authorised or licensed electricity retailers operating in the NEM that had 10,000 or more small customers on 16 November 2021, or at all times during a later financial year (larger retailers keep that status even if numbers fall). The initial retailers named in the Rules are the AGL, Origin Energy and EnergyAustralia groups. Retailers below 10,000 small customers have no data holder obligations unless they become accredited data recipients or opt in voluntarily.
What triggers it
Retailing electricity to NEM connection points and crossing the 10,000 small customer threshold, becoming an accredited data recipient, or electing to participate as a data holder.
When due
Initial retailers: non-complex requests from 15 November 2022, complex from 15 May 2023. Larger retailers: 1 November 2023 and 1 May 2024. Accredited small retailers: 12 months after accreditation for non-complex requests and 18 months for complex requests. Data holders report to the ACCC and OAIC twice a year.
Evidence required
Product data and consumer data request endpoints passing the Conformance Test Suite; CDR policy prepared under OAIC guidance; consent, IT, security and privacy safeguard procedures; twice-yearly reports in the approved format counting product data requests, consumer data requests and refusals with the rule or standard relied on; records supporting each refusal.
Max penalty
The ACCC and OAIC jointly monitor compliance and may take enforcement action under their joint CDR Compliance and Enforcement Policy. The CDR is established under the Competition and Consumer Act 2010; penalty amounts were not restated here.
Summary
The Consumer Data Right (Energy Sector) Designation 2020 brings energy data in the National Electricity Market into the CDR, so a consumer can direct their electricity retailer to share their data with an accredited data recipient such as a comparison service. Product data sharing (electricity, gas and dual fuel plans) began on 1 October 2022 and consumer data sharing on 15 November 2022. The retailer is the primary data holder for customer, account, billing and tailored tariff data; AEMO is a secondary data holder for metering, National Metering Identifier standing data and distributed energy resources register data; the AER and the Victorian government are designated holders of product data. Obligations under Part 4 of the CDR Rules were phased in by retailer size, with later dates for complex requests made for large customers, secondary users or joint accounts.
Enforced by
Source legislation
Topics
Related
- CWLTHConsumer Data Right (CDR) participant accreditation + complianceBanking, energy and (soon) non-bank lending data sharing — accredited participants must comply with privacy safeguards.
- CWLTHNotifiable Data Breach (NDB) schemeUnder the NDB scheme, APP entities must notify the OAIC and affected individuals of an eligible data breach likely to cause serious harm — assessed within 30 days.
- CWLTHMajor banks must provide CDR Banking + Action Initiation (2026)CDR Action Initiation lets accredited recipients initiate payments + actions on consumer behalf.
- CWLTHAPP 3 collection of sensitive informationAPP 3 bars collecting sensitive information — health, race, religion, sexual orientation and more — without consent. What counts as sensitive, the exceptions and penalties.
- CWLTHNGER reporting (Clean Energy Regulator)Threshold-triggered annual emissions, energy production + consumption reporting.
- CWLTHSafeguard Mechanism baseline decline 4.9% paAustralia's 215 largest emitters face declining baselines under Safeguard Mechanism reform.
Frequently asked questions
- Who must comply with CDR Energy sector — phased?
- Authorised or licensed electricity retailers operating in the NEM that had 10,000 or more small customers on 16 November 2021, or at all times during a later financial year (larger retailers keep that status even if numbers fall). The initial retailers named in the Rules are the AGL, Origin Energy and EnergyAustralia groups. Retailers below 10,000 small customers have no data holder obligations unless they become accredited data recipients or opt in voluntarily.
- What triggers CDR Energy sector — phased?
- Retailing electricity to NEM connection points and crossing the 10,000 small customer threshold, becoming an accredited data recipient, or electing to participate as a data holder.
- When is CDR Energy sector — phased due?
- Initial retailers: non-complex requests from 15 November 2022, complex from 15 May 2023. Larger retailers: 1 November 2023 and 1 May 2024. Accredited small retailers: 12 months after accreditation for non-complex requests and 18 months for complex requests. Data holders report to the ACCC and OAIC twice a year.
- What is the maximum penalty for CDR Energy sector — phased?
- The ACCC and OAIC jointly monitor compliance and may take enforcement action under their joint CDR Compliance and Enforcement Policy. The CDR is established under the Competition and Consumer Act 2010; penalty amounts were not restated here.
- What evidence is required for CDR Energy sector — phased?
- Product data and consumer data request endpoints passing the Conformance Test Suite; CDR policy prepared under OAIC guidance; consent, IT, security and privacy safeguard procedures; twice-yearly reports in the approved format counting product data requests, consumer data requests and refusals with the rule or standard relied on; records supporting each refusal.
Source: https://www.cdr.gov.au/rollout/cdr-energy-sector. Rules Mate is not a law firm. Always verify against the live regulator source before acting.