National Australia Bank (NAB) has been penalized for failing to accurately disclose credit limit data in response to requests made by different CDR-accredited providers on behalf of consumers.

What is the CDR?

The Consumer Data Right (CDR) aims to facilitate a nationwide data-sharing program benefiting Australians through access to their business-held data. For optimal use, shared consumer data must be accurate, up-to-date, complete, and in the correct format. Poor data quality can hinder consumers from fully enjoying CDR benefits.

In NAB’s case, inaccuracies in credit card limit information affected services offered by several fintech companies, particularly those that develop tools for mortgage broking using CDR data. These tools aim to help customers efficiently apply for loans and secure better deals through optimized use of their data.

According to the ACCC, this was the highest penalty for alleged breaches of the CDR Rules at the time of writing. NAB cooperated with the investigation and has since corrected identified data issues.

NAB’s Recent Measures

In February 2025, NAB implemented scam warnings in their app and internet banking services to protect customers from potential frauds related to invoices, investments, romance scams, and more. This initiative involved real-time alerts that stopped users before they made suspicious payments.