The Commonwealth Bank of Australia (CBA) has been fined a total of $792,000 after the Australian Competition and Consumer Commission (ACCC) issued four infringement notices for alleged violations of the Consumer Data Right (CDR) Rules.

The ACCC claims that CBA did not enable data sharing for certain accounts belonging to business consumers and partnerships, which hindered their ability to access CDR-enabled products and services, such as business accounting tools. This failure led to complaints from consumers who faced difficulties in accessing their data, forcing them to resort to less secure methods or manual workarounds.

The CDR is a significant reform aimed at empowering Australians to utilize the data held by businesses for their benefit. Since November 2021, major banks, including CBA, have been required to facilitate consumer data sharing for non-individual CDR consumers.

ACCC Deputy Chair Catriona Lowe emphasized that this penalty is the highest to date for a breach of the CDR Rules and reiterated the commission's commitment to enforcing compliance to ensure consumers benefit from the CDR system.

CBA has agreed to provide redress to affected consumers and accredited providers, including enabling data sharing for remaining Trading Entity Business Name (TEBN) accounts by December 19, 2025, and offering remediation payments to impacted business customers.

The remediation program is set to commence in January 2026, with CBA notifying affected customers on how to submit claims. The ACCC continues to prioritize enforcement actions against insufficient data quality and compliance failures.