Intuit Australia Pty Limited CDR Policy
This Consumer Data Right Policy was last updated on 29 October 2025.
1) About this Consumer Data Right Policy
Intuit Australia Pty Limited (Intuit Australia, we or our) has implemented this
Consumer Data Right Policy (CDR Policy) to provide information about what kinds of Consumer Data Right information (CDR Data) we may collect or hold, how we collect, hold, use and disclose that CDR Data, choices you have regarding our use of that CDR Data, and your ability to access or correct that CDR Data.
If you wish to make inquiries regarding this CDR Policy, you should contact us in any of the ways specified in paragraph 11.
As an Accredited Data Recipient, Intuit Australia will securely access your banking information via the governments’ Open Banking initiative, with the assistance of its outsourced service provider, SISS Data Services Pty Ltd (SISS). Paragraph 4 has further information about this arrangement.
The Open Banking rules are defined by the Consumer Data Right (CDR). You can access more information about CDR here.
2) Collection and classes of your CDR Data
Intuit Australia will seek your consent to collect CDR Data which is necessary to provide online accounting and financial software for you to help reconcile your accounting books.
The type of CDR Data that we will seek your consent to collect comprises:
- account balance and details: account name, account type, account balance, account number, interest rates, fees, discounts, account terms, account mail address; and
- transaction details: incoming and outgoing transactions, amounts, dates, descriptions of transactions (ie who you have sent money to or received money from, their name, BSB and account number).
- organisation profile and contact details:
Agent name and role, Organisation name, Organisation numbers (ABN or ACN), Charity status, Establishment date, Industry, Organisation type, Country of registration, Organisation address, Mail address, Phone number
At the time when you give your consent for this type of CDR Data to be accessed, you will be provided with a consent receipt which includes a summary of the duration and scope of your consent and the types of CDR Data that you have consented to be retrieved from the nominated bank accounts. This receipt is available via a consent dashboard that we provide. If you wish to withdraw your consent you provided, you may do so via the consent dashboard.
3) What is the purpose of collecting CDR Data?
Account information and transaction details will be collected so we can provide our online accounting and financial software to you and to help you reconcile your accounting books.
4) How do we store and disclose CDR Data?
Intuit Australia will not store your CDR Data. Your CDR Data will be collected by SISS on Intuit Australia’s behalf. Intuit Australia will seek a Business Consumer Disclosure Consent along with a collection consent, to enable SISS to share all CDR Data described in paragraph 2 that it collects with Intuit Inc.
Intuit Inc. is Intuit Australia’s ultimate parent company and owns the technological platform that hosts your QuickBooks Online account. As soon as your CDR Data is collected by SISS, it will be shared with Intuit Inc so that it can be stored in your QuickBooks Online account. More information about how Intuit Inc. securely stores your data on its platform can be found here.
Intuit Inc. has arrangements with Amazon Web Services to provide cloud infrastructure services, including storage, computing and processing services. All CDR Data described in paragraph 2 will be stored in Amazon Web Services in the United States of America region.
Intuit Australia will not disclose your CDR Data for any purpose to any other third party not mentioned above.
5) How can I access and correct my CDR Data?
You will be able to view your CDR Data in your QuickBooks Online account. You can submit a request to have the CDR Data in your QuickBooks Online account corrected by contacting us using the details in paragraph 11 below .
6) How can I make a complaint in connection with my CDR Data?
If you think that Intuit has breached the CDR rules, or if you have any CDR-related complaint or are dissatisfied with us in connection with your CDR Data, for example, in relation to:
- our obligations under or in compliance with Part IVD ("Consumer Data Right") of the Competition and Consumer Act 2010 (Cth), the Competition and Consumer (Consumer Data) Rules 2019, or any binding data standards, or
- our provision to you of the goods or services in respect of which you granted your consent under part 4 of the Competition and Consumer (Consumer Data) Rules 2019, and
- for which a response or resolution can be reasonably expected,
you can make a CDR-related complaint at any time via:
- our website chat, when available at QuickBooks® Australia Official Contact Us,
Contact QuickBooks Australia Customer Service (intuit.com);
- by phone on 1800 046 038 (between 8.30am - 6.30pm AEST/AEDT Mon-Fri); or
- by post to Level 34, 1 O’Connell St, Sydney NSW 2000, marked for the attention of the Customer Success Team and include the following information in your CDR-related complaint:
- your name;
- your contact details;
- your preferred way to be contacted (for example, via phone, email or post); and
- the details of your CDR-related complaint and any specific information related to the cause of the CDR-related complaint.
We will acknowledge receipt of your CDR-related complaint within 24 hours (or one business day) of receiving it. We will have regard to the manner in which the CDR-related complaint was made and any communication preferences you have given us. Therefore, acknowledgement may be verbally or in writing, depending on the circumstances of your CDR-related complaint.
For further information about how we handle CDR-related complaints and the timeframes in which we do so, in accordance with our Internal Dispute Resolution Policy, please contact us via the Contact Details in paragraph 11.
Referring complaints to an External Dispute Resolution Scheme (EDR Scheme)
Intuit is also a member of the Australian Financial Complaints Authority’s (AFCA’s) external dispute resolution scheme. This is an independent and impartial external dispute resolution (EDR) ombudsman, approved by ASIC. Our AFCA membership number is 75753.
You may refer your complaint to AFCA at any time, including if you are unhappy with how Intuit has resolved your complaint. AFCA’s details are:
Online: www.afca.org.au
Email: info@afca.org.au
Phone: 1800 931 678
Mail: Australia Financial Complaints Authority, GPO Box 3, Melbourne, VIC 3001
Office of the Australian Information Commissioner (OAIC)
Complaints involving your CDR Data and how we have handled your personal information can be referred to the OAIC by completing the online form or by contacting the OAIC using the details below. Please note that the OAIC requires any complaint to first be made to us. The law also allows 30 days for us to deal with the complaint before you may make a complaint to the OAIC. OAIC’s details are:
Online: https://www.oaic.gov.au
Phone: 1300 363 992
Mail: Office of the Australian Information Commissioner, GPO Box 5288, Sydney NSW 2001
7) What happens if there is a data breach?
In the event of a data breach (such as where an unauthorised third party accesses CDR Data) Intuit will notify the affected CDR consumers as soon as reasonable in the circumstances and without undue delay if the breach is an 'eligible data breach' under the Notifiable Data Breach Scheme so consumers can take any appropriate action to mitigate any damage or loss that may be caused by the data breach.
8) Withdrawing consent and deleting my CDR Data
You can choose to withdraw your consent for Intuit Australia to collect your CDR Data and the Business Consumer Disclosure Consent for Intuit Australia to share your CDR Data with Intuit Inc. at any time. If you withdraw one consent, the other will automatically be withdrawn as Intuit Australia only collects your CDR Data for it to be shared with Intuit Inc. as described in paragraph 4 above.
To withdraw your consent, go to your consumer dashboard and select ‘Manage Connections’ then select ‘Manage Consent’ and then select ‘Unlink’. This will revoke your consent. You may also contact us via the Contact Details listed in paragraph 11, if you need assistance.
As your CDR Data is stored in your QuickBooks Online account hosted by Intuit Inc. you can submit a request for Intuit Inc. to delete your CDR Data at any time by contacting us via the Contact Details listed in paragraph 11.
9) What is the consequence of withdrawing my consent?
When you withdraw your consent in accordance with paragraph 8, we will stop collecting CDR Data and sharing it with Intuit Inc. All CDR Data that has previously been collected and shared with Intuit Inc. that has been posted to your account will remain in your QuickBooks Online account.
10) Where is this policy available?
This policy is available via our website at https://www.intuit.com/privacy/data-usage/au-en. In addition, an electronic or physical copy of this policy will also be provided if requested by contacting us via any of the Contact Details in paragraph 11.
11) How can I contact Intuit?
You can contact us at any time, including for any of the purposes specified in this policy:
- via our website chat, when available at QuickBooks® Australia Official Contact Us, Contact QuickBooks Australia Customer Service (intuit.com);
- by phone on 1800 046 038 or
- by writing to us at Attention: Customer Success, Intuit Australia Pty Ltd, Level 34, 1 O’Connell St, Sydney NSW 2000.
