Consumer Data Right

The Consumer Data Right (CDR) is an opt-in service that allows consumers to share their data securely with authorized third parties called Accredited Data Recipients (ADRs).  This includes data held by electricity retailers.

The CDR is designed to provide Australian consumers with choice on how their data is used and shared, and in turn, choose from a range of tailored and innovative products and services. By permitting Dodo Power & Gas (DPG) to share your data, ADRs can help you make informed decisions about products available to you. 
 

There is no obligation to share your data. If you consent, you authorise your data to be shared with ADRs. You can withdraw your consent at any time.

The CDR allows you to share your data securely with ADRs. Sharing your data with the ADRs, can make it easier for you to:

• Compare products and services; and

• Access better value and improved services.

Important: DPG will never ask you to share your DPG login details, password or verification code with a third party.

To be eligible, you must:

• Be 18 years or older;

• Have an active residential or small business account with DPG, or have had an active account within the last 24 months;

• Not be a Commercial & Industrial Customer; and 

• Not be an off-market embedded network customer (such as residential customers who live in apartment buildings, retirement villages, gated residential communities etc).

Yes! There are strict protocols that apply to both the collection of CDR data and use of that data under the Competition and Consumer Act and the CDR Rules.

The Australian Competition and Consumer Commission (ACCC) manages this process to ensure it is safe and secure for consumers. ADRs must go through a rigorous accreditation process to provide CDR services to you.

Your data will not be shared without your consent.

Important: DPG will never ask you to share your DPG login details, password or verification code with a third party. 
 

You can find a list of ADRs here. ADRs will ask for your consent to collect your data.

Once you have consented, you will be asked to confirm that you wish to share your data held by DPG. DPG will verify your identity using the email address recorded against your account and email you a one-time password to authorise the request.

You can revoke this access and stop sharing any time you like. Read more on how to revoke access.  
 

Multiple Accounts

If you have more than one electricity account with DPG, you will need to provide consent for each account separately. After entering the One-Time Password (OTP), select the first account you wish to provide consent for, then click continue.

Check the box and click continue.

You will then be asked to confirm that your data may be shared. Once confirmed, and the ADR has retrieved the associated data, the ADR will be able to trigger another request to share data, and you will be asked to provide consent again. Select the next account you wish to share data for. All accounts you have consented to share data for will be displayed in your consumer dashboard. 

As of 1 May 2024, any DPG customer account that has two or more joint account holder or accounts with one or more account holders and/or secondary users (referred to as an authorised representative by DPG) will now be able to share their data with ADRs.

By default, the disclosure option that will apply is the pre-approval option. If one account holder or authorised representative requests a disclosure of data, the other account holders are treated as having approved the disclosure of the data related to the joint account which the request was submitted.

An account holder can elect at any time to change its disclosure option and opt for the more restrictive non-disclosure option, any joint account holder can choose the non-disclosure option to apply to the joint account. Under the non-disclosure option no data will be shared with any ADRs and any existing requests submitted will cease to be shared as well.

An account holder can always change its disclosure option and elect to re-apply the less restrictive pre-approval option at any time, whereby data will be able to be shared with all ADRs again. Any existing requests that are still active would re-commence the sharing of your data. If you change to a less restrictive disclosure option, all account holders need to approve the change for the pre-approval option to apply.

An account holder can also elect to withdraw approval for a specific CDR request, which will not impact other active requests. The account holder who withdrew approval, may elect to remove the withdrawal, allowing sharing to re-commence for that specific CDR request, assuming it is still active.

Authorised representatives may not change disclosure options or withdraw approval of specific CDR requests, other than those the authorised representative requested themselves.
All disclosure options and withdrawals can be managed via the Consumer Dashboard.

As of 1 May 2024, small business customers can share their data when a CDR request is submitted.

For small business customers, the business is deemed the CDR account holder and any account holder or authorised representative of the small business customer within our billing system is deemed as a nominated representative.

A nominated representative of a small business may request data to be shared with an ADR.

Any nominated representative may give, change, or manage authorisations to disclose data on behalf of the small business customer.

A nominated representative may also make a request to revoke any nominations.

If any of the named account holders or authorised representatives within your DPG customer account share an email address, we will not be able to share your CDR data with an ADR.

This is because we are not able to identify which account holder or authorised representative of the customer has submitted the CDR request.

To rectify this, simply contact us and update your account detail by adding a different email address for any individuals that are an account holder or authorised representative of your DPG customer account.

We are required to make available the following types of data for sharing:

• Customer details including:

  • Name

  • Supply address

  • Contact details

• Account and plan details, including:

  • DPG electricity account number and plan details

  • Fuel type

  • Product data

  • Concessions and payment assistance details (if you have any)

  • Payment details (how you pay your bill, billing frequency and any scheduled payments)

• Payment details including history information

• Australian Energy Market Operator (AEMO) data, including:

  • National Metering Identifier (NMI) standing data

  • Electricity connection and meter details

  • Metering data including usage

  • Electricity generation and storage (if you have solar)

To view and manage your shared data:

1. Access your dashboard

2. To access your consumer dashboard, we’ll send you a One Time Password (OTP) via email to complete your verification

3. You can view and amend the data for:

   • Electricity accounts shared

   • Types of data shared

   • The period for the data share

You can view all your data sharing arrangements through the consumer dashboard. You can access the dashboard by following the first two steps under FAQ How do I manage my shared data?

You can also contact us to request copies of:

• Authorisations given to disclose CDR data;

• Amendments to or withdrawals of those authorisations;

• Disclosures of CDR data pursuant to those authorisations; and 

• CDR complaint data that relates to them.

If you are having issues verifying your identity in the consumer dashboard and didn’t receive a One-Time Password (OTP), try the following trouble shooting tips:

• Check your junk or spam folder.

• If your inbox is full, you might not be able to receive emails. Make some space and try again.

• Check that you have entered the registered email address correctly.

• If you are using a “focused” inbox, check any other tabs.

• Try resending the OTP.

• Contact us.

If you have used an email not registered on your account, you will not receive a OTP.
 

Should you decide that you no longer want to share your data with an ADR, you can:

1. Access the dashboard using your registered email address

2. You will be sent a OTP to complete your verification

3. Enter the OTP 

4. Select “Manage Data Sharing” 

5. Click the data sharing arrangement to stop sharing

6. Select “Stop Sharing”

7. You will receive a message warning of the consequences of selecting “Stop Sharing”  

8. Select “Stop Sharing”

If you have any issues, please contact us so we can assist you.

If you believe any of the data we have shared about your account is incorrect, please contact us on 13 36 36 Monday to Friday 8am to 7pm AEST.

You have the right to request the ADR you shared your CDR data with to delete or de-identify your data.

You should check their app or website for more information on how they handle any data you have already shared with them.

Our CDR policy can be found here.

If you need more information, we can be contacted on 13 36 36 Monday to Friday 8am to 7pm AEST.