How to use Open Banking

Information that may be shared with consent

Credit Union SA is currently a Data Holder. Our members, or Data Owners, may consent to share their Credit Union SA data with an authorised organisation, referred to as a Data Recipient. A Data Recipient can request our members to consent to sharing their data for a range of purposes, such as a product application, or for use within an app.

Information that may be shared with consent can include:

Duration of Data that can be shared

When consent to share data is provided to a Data Recipient, the duration that the data will be available is also set. Data can be shared with the Data Recipient for either: 

Initiate Data Sharing

Before we, as a Data Holder, make data available to a Data Recipient, the Data Owner (you) must authorise for us to share your data. This process is initiated through the Data Recipient’s own channel, such as a website or app. During this process, you will confirm the consent period, find out what happens when you withdraw or amend consent and select data to be shared. If you need assistance with this process, please contact the Data Recipient. Once completed, you will be directed to our Authentication to share data webpage to begin the Authorisation Process, outlined below.

Authentication Process for approving and amending data sharing

Before we, as a Data Holder, make your data available to a Data Recipient, the Data Owner (you) must complete a process to authorise the consent through our Open Banking portal. For Joint Accounts, these authentication steps can be completed by one joint account holder, with notifications sent by email to the second account holder.

After you have completed a request to share data with a third party, you will be directed to the Credit Union SA authentication page. Members can authenticate of amend requests to share data using the following steps:

How to view your One Time Password (OTP)

OTP to your email address

When you request an OTP, your nominated email will be displayed at the OTP entry screen – hashed out for your security.

OTP to your device

If you have Push Notifications set up on your registered device, you will receive a pop-up notification with your password. 

OTP to Internet Banking and Mobile Banking App

If you do not have a registered email address or Push Notifications setup, you will need to generate an OTP using Internet Banking or our Mobile Banking App.

Approve sharing request

The Approve Sharing Request screen will display to you the following details: 

• How long the data will be available to the Data Recipient.
• The start date for the data being shared.
• Instructions for reviewing, amending and stopping the request once this has been approved.

If you don’t wish to proceed with the information which is presented on this screen, please click Deny Request to cancel the request moving forward.

You will also be able to access our CDR Policy prior to approving your sharing request.

Consumer Data Right (CDR) Policy

Data to be shared

The next screen will display a summary of the data you are consenting to share. This will include:

Personal details

• Full name(s), title(s), occupation, phone, email, residential address and mailing address.

Account balance details

• Name of Account, type of Account, Account number, Account balance, interest rates, fees, discounts, Account terms, and Account mail address.

Transaction details

• Incoming and outgoing transactions, amounts, dates, descriptions of transactions.

Saved payees

Direct debits and scheduled payments

Select Accounts to share

On the next screen, a list of your eligible Accounts will be presented for selection.

Please note, we are not required to share consumer data:

• where the Account was closed no more than 24 months before that time – transaction data in relation to a transaction that occurred more than 12 months before the Account was closed;
• where the Account was closed more than 24 months before that time:

• Account data that relates to the Account; and
• transaction data that relates to any transaction on the Account:
• product specific data in relation to a product relating to any such Account.

• when not mandated by the ACCC. Products and types of data to be shared will be progressively rolled out. Refer to the Open Banking timeline.

Select the Accounts which you wish to share with the Data Recipient or click Select All Accounts to share the entire list. Once all required Accounts are selected, click confirm to finalise the sharing request.

When you don’t select any Accounts, you will be authorising for us to share your personal data only. 

Enable or disable data sharing as a Joint Account holder

You can disable or enable data sharing from Joint Accounts at any time. 

1. Log in to Internet Banking and go to the Settings > Sharing menu
2. Request and Enter the Secure SMS code
3. From the sharing screen, click ‘Joint Account Sharing’. On the Joint Account Sharing page, view Accounts available to be shared within an authorisation. From this page you can enable or disable sharing for a Joint Account within an Open Banking Agreement.
4. To re-enable sharing, the second Account holder will be notified and will need to consent. 

View requests to share data in Internet Banking 

You can view the requests you have consented to in Internet Banking or within our Mobile Banking App.

Within Internet Banking, select Sharing under the Settings Menu. To access the Sharing page, you will need to be registered for Secure SMS.

Within the Mobile Banking App, this is accessed in the main menu by selecting Settings and then Sharing management.

Data sharing status:

• Active: Data sharing is currently active with the Data Recipient.
• Withdrawn: Data sharing has been withdrawn, by the Data Owner or the Data Holder.
• Expired: The duration of data sharing with the Data Recipient has expired.
• Once-off: Data is only available to the Data Recipient for 24 hours. 
• Pending: The joint account is currently disabled for data sharing. The Joint account sharing request is waiting to be enabled by a joint account owner. Click on the status to view further details.

View requests to share data as a Joint Account Holder

Once the above steps to re-share an Account are completed by one Account holder, the second Account holder can enable or deny the sharing request using the steps below:

1. Log in to Internet Banking and go to the Settings > Sharing menu
2. Request and Enter the Secure SMS code
3. From the sharing screen, click ‘Joint Account Sharing’. On the Joint Account Sharing page, view Accounts available to be shared authorisation. From this page you can enable or disable sharing for a Joint Account within an Open Banking Agreement.
4. Accounts pending sharing will be highlighted orange on this page, with the notice ‘An Account owner has requested your approval to enable data sharing’. Select review.
5. The Account sharing information will be presented to you. Click decline to exit or approve to proceed with data sharing steps.
6. An email will be received by both Account holders when approved or declined.

How do I view my secondary users?

1. Go to Internet Banking > Settings > Request a Secure SMS and Enter the SMS Code and select Validate
2. Select ‘Secondary user permissions’ and select ‘Manage’ next to the account you want to view
3. You will be able to view the ‘Secondary user sharing management’ authorisation and toggle on/off to enable/disable sharing permission
4. Select Next > Save changes.

I’ve been authorised as a nominated representative, how do I authorise the agreement?

1. Go to Internet Banking > Settings > Sharing > Secure SMS > Enter Code > Validate > Secondary User Permissions
2. Select relevant account > Manage > Toggle > save changes.

How do I remove an Account signatory authorisation of a secondary user?

1. Go to Internet Banking > Settings > Sharing > Secure SMS > Enter Code > Validate > Secondary user permissions
2. Toggle off ('Signatory disabled' will display under the contacts name).

How do I remove an account shared by a secondary user?

1. Go to Internet Banking > Settings > Request a Secure SMS and Enter the SMS Code and select Validate
2. Here you will be able to view your Sharing agreements and their status e.g. Active
3. Select Active > click on “Account balances and details” and “Remove account”
4. PLEASE NOTE: If there is only one account in the sharing agreement then the agreement needs to be cancelled to be able to remove the account. If you have multiple accounts, you can go to account balances and details and remove one account as long as there is another linked to the agreement.

How do I remove an account off an agreement?

1. As long as you have more than one account in the agreement you can remove an account by going to Internet Banking > Settings > Request a Secure SMS and Enter the SMS Code and select Validate
2. Select active > click on “Account balances and details” and “Remove account”

How do I remove a secondary user

1. Go to Internet Banking > Settings > Sharing > Request a Secure SMS and Enter the SMS Code and select Validate
2. Select ‘Secondary user permissions’ and select ‘Manage’ next to the account you want to view
3. Toggle off

How do I remove an account shared by another user?

1. Go to Internet Banking > Settings > Sharing > Request SMS Code > Input OTP (One time password) 
2. Select Secondary user permissions
3. Select the account you want to remove and click “Active”
4. Expand the elipses (… ) under Account balances and details and select “Remove account”
5. Under “Would you like to proceed?” select “Remove account”

How do I remove permissions from secondary user?

1. Go to Internet Banking > Settings > Sharing > Request SMS Code > Input OTP (One time password)
2. Select Secondary User Permissions
3. Select Manage > Toggle On / Off > Select Next > Save changes

How do I approve or deny a Secondary Authorising Sharing agreement as a Non-Personal user?

1. Go to Internet Banking > Settings > Sharing > Request SMS Code > Input OTP (One time password)
2. Enter your Credit Union SA member number to authenticate the date sharing request you have made from “{Account name}”
3. This will generate a one time password that will be sent to your email or a push notification to your banking app.
4. Enter code within 10 minutes or it will time out.
5. Select which account you want to share from by clicking the relevant radio button and:
6. To approve the request: “I consent” > select Next > check details and select I Consent > Confirm
7. Or to deny a request, select Deny Request > Confirm

How do I view an authorisation once it is activated?

1. Go to Internet Banking > Settings > Sharing > Request SMS Code > Input OTP (One time password)
2. Select Active next to the relevant account
3. View the details under ‘Account balances and details‘.