Data Security

Under Consumer Data Right (CDR) laws, every business account must have a Nominated Representative. This person has the authority to authorise and withdraw consent for sharing data in the CDR

You can share your data if you are an ‘eligible customer’. To be eligible, you must: If you fall into one of the categories below, you can’t share your data until May 2024:

Please send all data questions or complaints to reply-to@consent.adatree.com.au.

Aside from complying with CDR privacy regulations, we also have robust physical, electronic, and managerial procedures in place to protect your personal information and prevent unauthorised access to your data.

You can change your data access permissions in your profile settings. To do this, navigate to Settings > Customer Data Right > View and manage consent. You can also revoke

Once you’ve given us consent, we will access your data for 12 months. You will need to renew permissions every year. Renewal follows the same process as the original consent:

If your energy provider is not on the CDR consent list, it could be that they are not yet accredited to participate in the CDR.

There are a few reasons why you didn’t get a one-time security code: The one-time security code ended up in your junk or spam folder.

When you sign up to use EnergyFlex, you automatically consent to our Privacy Policy. However, you will need to give us explicit consent to access your Consumer Data Right (CDR) data.

EnergyFlex analyses time-of-use data from your smart meter to understand how and when you use electricity. With this information, it assigns an EnergyFlex Rating, which is a unique measure of