Customer data rules are changing
Businesses will face changed customer and product data requirements, but the title gives no further detail.
Customer and Product Data (General Requirements) Amendment Regulations (No 2) 2026
What's changing
- Data holders will not have to provide a system for an individual to authorise certain data requests for a customer.
- The planned 1 June 2027 start date for that requirement is removed.
- The related heading and commencement detail are removed from the regulations.
Who's affected
Data holders and customers who use, or may use, requests under the Customer and Product Data Act 2025 are affected.
When
These changes take effect on 8 October 2026.
What you might need to do
- Data holders do not need to prepare for the revoked requirement.
- Customers do not need to prepare for this particular authorisation system.
Background
The regulations remove a requirement that was due to start on 1 June 2027. That requirement would have enabled one individual to act for a customer when authorising certain data requests.