AFFILIATE ACCESS TO CONSUMER DATA RIGHT

about cdr affiliate

questions?

• What data do I receive when being a CDR Affiliate?

  You have access to all data fields (clusters, metadata) to which an unrestricted ADR has access. This includes transactional, account, product, payee and transactional data.
  
  All data can only be accessed when consented by a customer.
  
  The key difference is that you receive it through your Sponsor, that accesses the CDR data on your behalf.

• What do I do to be an Affiliate?

  You still have to meet all technical, security and business requirements.

  You have a sponsor arrangement with Adatree, and you also have do be accredited with the ACCC. It is not a full accreditation.

  Being an Affiliate doesn't mean you can take any security shortcuts. Customer protections of their data is still of the utmost importance.

  It does shortcut your process if you already have good practices in place, though.

• How long does it take to be a CDR Affiliate?

  Being an Affiliate is longer than being a Representative but shorter than being an Unrestricted Accredited Data Recipient. 

  Adatree has a clear framework and process to assess you as our Affiliate, including any evidence you need to provide and attestations too.
  
  Timing really depends on your business and technical readiness and how fast you can adjust to anything that comes up. We can go as fast as you can. The ACCC has not processes any Affiliates yet, as it is not yet live, but you may be dependent on their timelines to process your Affiliate application. 

• Is my business eligible to be a CDR Affiliate?

  Any business can be a CDR Affiliate. Adatree has to learn about your use case, architecture, security controls and aspects of your business. Some businesses might have very few, if any changes, to be made, while others have other governance or security improvements to make.
  
  Ultimately, any improvements are in the best interest of your customers and overall information security governance.

• How do I know if being a CDR Affiliate if right for me?

  Take Adatree's CDR Access Quiz and find out in less than a minute!

• Why would I want to be a CDR Affiliate instead of unrestricted Accredited Data Recipient?

  Businesses have their own rationale for being an unrestricted ADR instead of being an Affiliate, but a few common reasons are:
  

  • Wanting to sponsor other company(s) as an Affiliate or Representative
  • Business strategy and/or publicity
  • Dependency on other regulations or accreditations

• Do I need an audit?

  No. When being an Affiliate, you don't need an official external audit. Adatree will still assess your business, but it will be much cheaper and faster.

• What if I switch how I want to access the CDR?

  If you're an Affiliate and access the CDR through Adatree, you can still work towards being an unrestricted Accredited Data Recipient if you change your mind. Adatree will support you on your transition.