Data portability rights are viewed by policymakers worldwide as a significant legal innovation to stimulate competitive digital economies. These rights allow consumers and businesses to seamlessly receive and transfer data for commercialization and efficiency purposes. The newly implemented Australian Consumer Data Right (CDR) provides an illuminating example of the complex relationship between information privacy and competition law which is central to data portability initiatives. The CDR grants consumers and businesses access and transfer rights for consumer data in the Australian banking, energy, and telecommunications sectors, through the implementation of mandated API standards. There are three policy vectors at the heart of the CDR that parallel previous Australian, UK, and EU data portability developments. They are the type of regulated data covered by the CDR scheme, privacy and security protections and the overarching regulatory framework. We argue that the CDR, and its antecedents, primarily construct data portability as a competition law measure. However, while the general policy intention of the CDR is clear, we contend that the scheme reveals an uncertain role for information privacy law as part of its operation. Uncertainty is evident in how policymakers have considered the information privacy law issues inherent in the three policy vectors. We contend that the CDR could give rise to definitional problems with regulated data, duplicated privacy and security protections and a conceptually challenging regulatory framework. In conclusion, we suggest potential solutions that would assist with the operation of the CDR within Australia’s broader information privacy law framework, governed by the Privacy Act 1988 (Cth), which would also better align with the General Data Protection Regulation (GDPR).

中文翻译：

---

澳大利亚的消费者数据权和信息隐私法的不确定作用

全球政策制定者将数据可移植性权利视为刺激竞争性数字经济的重大法律创新。这些权利允许消费者和企业出于商业化和效率目的无缝接收和传输数据。新实施的澳大利亚消费者数据权 (CDR) 为信息隐私与竞争法之间的复杂关系提供了一个有启发性的例子，这是数据可移植性举措的核心。CDR 通过实施强制性 API 标准，授予消费者和企业访问和传输澳大利亚银行、能源和电信行业消费者数据的权利。CDR 的核心有三个政策向量，它们与之前的澳大利亚、英国和欧盟数据可移植性发展平行。它们是 CDR 计划、隐私和安全保护以及总体监管框架所涵盖的受监管数据类型。我们认为 CDR 及其前身主要将数据可移植性构建为竞争法措施。然而，虽然 CDR 的总体政策意图是明确的，但我们认为该计划揭示了信息隐私法作为其运作的一部分的不确定作用。政策制定者如何考虑三个政策向量中固有的信息隐私法问题，不确定性是显而易见的。我们认为，CDR 可能会引起受监管数据、重复隐私和安全保护以及概念上具有挑战性的监管框架的定义问题。综上所述，