Yes. Customer data security is important to IMB and all requests to access your CDR data must be initiated by you, through a secure environment. IMB cannot do this on your behalf.
Accredited Data Recipients who are providing services by Open Banking must comply with privacy and security requirements and be accredited by the Australian Competition and Consumer Commission (ACCC).