The implementation of the Consumer Data Right (CDR) needs serious reconsideration in order to place the interests of the consumer back into the centre of the regime – that is their interest in both obtaining benefits from their own data but also – and more importantly – their interest in a safe, secure and trustworthy data handling regime. Currently the CDR is less a consumer data right and more of a right for business to access consumer data, perpetuating an over-reliance on a deeply flawed consent and disclosure model.