Open Banking Legal Issues

Easier data transfer will also benefit incumbents, as they can share their data with fintechs. Banks could then better integrate fintech technology to improve their services and deepen customer relationships. Ultimately, open banking will help banks and businesses tailor their products and services to the needs of individual customers by extracting insights from large amounts of financial customer data. Open banking has the potential to make our financial services industry more competitive by ensuring consumers can take advantage of hundreds of modern financial products and applications that provide access to loans, savings plans, personal financial management tools, free peer-to-peer payment platforms and more. Open banking refers to a range of activities and services. The Basel Committee on Banking Supervision has aptly defined open banking as “the exchange and use of customer data by banks with third-party developers and companies to develop applications and services, including those that provide real-time payments, increased financial transparency options for account holders, marketing and cross-selling opportunities.” This is a broad definition that covers payment functions as well as financial planning and sales tools. 2021 was a historic year for open banking, with financial institutions giving consumers the ability to use and share their financial records. But consumers remain cautious when it comes to privacy issues: A 2021 Axway survey found that 47% of U.S. consumers worry about losing control of their access to financial data. More than half of U.S.

adults surveyed by the Future of Tech Commission felt they had little less or much less control over their personal data and privacy. The provisions of PSD 2 have contributed to the rise of open banking by breaking the consolidated monopoly of banks and financial service providers on the use of customer data for online and offline payments, investments and money management. DISCLAIMER: Due to the generality of this update, the information contained in this document may not be applicable in all situations and should not be implemented without specific legal advice based on specific situations. Where jurisdictions have provided little or no framework for API development, as is currently the case in the United States, TPPs have tended to rely on screen scraping or reverse engineering to provide open banking. In reverse engineering, TPP builds its own API to access the customer`s account by analyzing the information exchanged between the customer and the bank on the bank`s customer interface. Screen scraping uses the customer`s username and password to access customer data directly through the bank`s customer interface. While reverse engineering and screen scraping can sometimes be done with the knowledge and even support of banks, these solutions are often suboptimal in terms of protecting customer data and credentials, as there can be limited transparency if the bank is not informed of the identity of the TPP or its purpose of accessing the customer`s account. These are welcome developments that lay the groundwork for 2022 to be the year when open banking finally becomes a reality in the United States. While challenges remain, including ongoing discussions about what technology should be used to share financial data and opposition from large institutions fearing increased competition, in 2022 the CFPB has an opportunity to introduce open banking rules that encourage competition, reduce costs, broaden inclusion, and protect consumers.

Open banking would unlock a range of payment, investment, credit, financing and saving services and applications, the fintechs said. For example, Americans could share all of their bank account, debit, and credit card transaction data with an app that could then offer tips on how to avoid a bunch of expensive fees. Data is driving this rapid change and driving innovation in open banking and FinTech. However, data brings with it all the challenges and legal issues associated with its collection, use, and disclosure, as covered by the General Data Protection Regulation (GDPR). Directive (EU) 2015/2366 (the so-called Payment Services Directive2 or PSD2) has contributed significantly to the consolidation of the European payment services market and thus to the growth of Open Banking in the EU. In Italy, PSD2 was implemented by Italian Legislative Decree 218/2017, adopted on 13 December 2017. January 2018 (legislative decree). Banks and other account providers have no incentive to allow access to customer data through an API, even if it meets these standards. As a result, many of the world`s major jurisdictions have developed minimum standards for APIs and required banks to allow TPPs to access customer information through specialized APIs, with the notable exception of the United States.

This entry was posted in Uncategorized. Bookmark the permalink.