Australia has a credit-data sovereignty problem, and it's about to be renewed.
Every time an Australian applies for a loan, a credit card or a phone plan, a decision is made about them using data they will never see, held by companies most of them have never heard of. That data, decades of repayment histories, defaults and credit accounts, is among the most sensitive and valuable information about our financial lives. And most of it sits with a small number of largely foreign-owned legacy bureaus.
Right now the framework that governs how that data is exchanged, the Principles of Reciprocity and Data Exchange, or PRDE, is up for re-authorisation by the ACCC. It is a technical process that will attract little public attention. It shouldn't be that way, because the stakes are larger than they look.
A concentrated, largely foreign-owned market
Australia's credit reporting market is highly concentrated. Two overseas-headquartered legacy bureaus hold the overwhelming majority of it; purely domestic providers hold a sliver. That concentration deepened when the ACCC did not oppose the consolidation of two of the largest players in 2024. The independent Review of Australia's Credit Reporting Framework recognised how concentrated this market has become.
Why ownership matters
Credit assessment is moving fast toward automated, AI-driven models, and those models are only as good as the data they are trained on. Whoever controls the foundational dataset shapes who gets credit, at what price, for years to come. The data itself is held here in Australia, but the bureaus that control it are foreign-owned and answer to boards overseas. When infrastructure this important is controlled from abroad, we have effectively handed a piece of the national interest to a handful of foreign corporate boards.
The lock-in
The PRDE reinforces this. In practice it ties access to comprehensive credit data to rules set and administered by the very legacy bureaus that dominate the market. A new Australian entrant cannot easily get the historical data it needs to compete, because the major banks rely on the established bureaus and have little incentive to integrate a newcomer. The result is a closed loop: no data without integration, and no integration without data.
There is a better model
It already exists, at home and abroad. In Australian telecommunications, the Integrated Public Number Database holds industry-wide data in a neutral, central utility that all authorised participants can access on equal terms. And in many comparable economies, credit information itself is held in public credit registries operated through the central bank, as public infrastructure rather than by private incumbents. Australia could do the same for baseline credit data, require the largest players to contribute it to an independent registry, and let providers compete on the quality of their analytics rather than on control of the raw data. That is how you get innovation, lower costs and better decisions, without surrendering sovereignty.
Credit reporting is critical infrastructure. It deserves to be governed in the national interest, not renewed on autopilot. At TaleFin we are building a modern, Australian-owned alternative, and we have made a submission to the ACCC arguing exactly this. If you care about competition, consumer outcomes and where control of your data sits, this is one to watch.