Fintech + payments + crypto in Northern Territory

Major banks must provide CDR Banking + Action Initiation (2026)

CDR Action Initiation lets accredited recipients initiate payments + actions on consumer behalf.

Consumer Data Right (CDR) participant accreditation + compliance

Banking, energy and (soon) non-bank lending data sharing — accredited participants must comply with privacy safeguards.

Comply with CDR Banking (Open Banking) — major + non-major ADIs

Banking data holders must share consumer data with accredited recipients on consumer consent.

Crypto Asset Secondary Service Provider (CASSPr) licensing reforms

Treasury consultation 2024 on bespoke crypto licensing — separate from AFSL.

Payment Service Provider (PSP) licensing reform — implementation pending

Treasury reform of payments licensing to capture digital wallets + Buy Now Pay Later + stored value.

Stablecoin payments licensing — Treasury reforms (in scoping)

Treasury reforms scoping payment stablecoin licensing under PSP regime.

Crypto-Asset Reporting Framework (CARF) — implementation 2026-2027

AU adopts the OECD CARF for crypto reporting; reporting expected from 2027, first international exchange ~2028 (per Dec 2025 MYEFO).

Crypto Asset Platform licensing (Treasury reforms 2024-2025)

Treasury scoping CASP regime for digital asset platforms.

CDR Energy sector — phased

Energy retailers + distributors must share data via CDR.

Comply with Stored Value Facility rules (banking exception)

SVF providers must operate within APRA + Treasury rules on purchased payment facility regulation.

Comply with the ePayments Code

Voluntary but industry-standard code covering electronic transaction terms, mistaken internet payments, and unauthorised transactions.

PCI DSS card data security (contractual, via your acquirer)

Merchants that accept card payments must protect cardholder data to PCI DSS — a requirement of the card schemes, enforced through your merchant agreement, not an Australian statute.