Open banking explained

In financial services, open banking allows for financial data to be shared between banks and third-party service providers through the use of application programming interfaces (APIs). Traditionally, banks have kept customer financial data within their own closed systems. Open banking allows customers to share their financial information securely and electronically with other banks or other authorized financial organizations such as payment providers, lenders and insurance companies.

Proponents argue open banking provides greater transparency and data control for account holders, and could allow for new financial services to be provided. Proponents also say that it aims to promote competition, innovation, and customer empowerment in the banking and financial sectors.[1] [2] [3] Opponents argue that open banking can lead to greater security risk and exploitation of consumers.

The first open banking regulations were introduced by the European Union in 2015, and many other countries have introduced financial regulations related to open banking since.

History

The concept was first explored in 2003 as part of the open innovation movement that was promoted by Henry Chesbrough.[4] [5] The advent of internet banking and development of online technology in the early 2000s led to interest in access to the data, which was first seen in account aggregation attempts by technology companies.

During the 2010s, open banking was also linked to shifts in attitudes towards the issue of data ownership, illustrated by regulations such as GDPR and the open data movement. With open banking, banks turn into financial service platforms, technically implemented through a banking as a service concept.[6]

The first real regulatory move to open banking came in 2015 when the European Parliament adopted a revised Payment Services Directive known as PSD2.[7] The new rules were aimed at promoting the development and use of innovative online and mobile payments through open banking.[8] This introduced a number of new services, definitions, and obligations for market participants.

This was welcomed by fintech companies but banks were generally slow to agree to sharing the data for technical and security reasons as well as concerns for new competition. Between 2015 and 2021, a number of countries enacted laws and regulations forcing traditional banks to provide API access to customer data.

Risks and criticism

With open banking, banks open their APIs to third-party fintech companies, which comes with security risks. Hackers can target third-party apps and excessive access privileges could be given to employees. Malicious actors may be able to trick banking customers and third-party companies with phishing scams.[9]

There are also privacy concerns about open banking.[10] There is a risk of aggressive market practices or offering a customer more expensive products based on an analysis of openly-available financial data.

For consumers, open banking poses a risk of "digital and financial exclusion". Mick McAteer, from the UK research firm Financial Inclusion Centre, said that only the tech-savvy would benefit from open banking and it would lead to more financial exclusion of those with low income.[11] He said that consumers could be exploited, either by new types of payday loans or the misuse of data and personal information that people have revealed online.

Use and regulation

Africa

Open banking in Nigeria was kickstarted by the Open Banking Nigeria as an initiative to be non-partisan and non-financial API standards for Nigerian financial services. It was formed in June 2017 by a group of bankers and fintech experts who got together to propose the adoption of common API standards for the country.[12] Open banking in Nigeria later evolved into a regulatory backed initiative with the release of the open banking regulation by the Central Bank of Nigeria in 2021[13] and the subsequent Operational Guidelines for Open Banking in Nigeria.[14]

Australia

An open banking project was launched in Australia on 1 July 2019 as part of the Consumer Data Rights (CDR) project by the Treasury and Australian Competition & Consumer Commission.[15] The CDR legislation was passed by the Australian parliament in August 2019.[16]

In May 2023, Payments NZ, which supervises the payment system in New Zealand, said that the main banks will be ready by 2024 to implement open banking.[17]

European Union

In October 2015, the European Parliament adopted a revised Payment Services Directive known as PSD2.[18] The new rules were aimed at promoting the development and use of innovative online and mobile payments through open banking.[19] It introduced a number of new services, definitions, and obligations for market participants.

More than two years after the entry into force of the PSD2 provisions, which took place on 13 September 2019, the European Commission announced the commencement of the review procedure of the Directive.[20] On 18 October 2021, the European Commission submitted a call for advice to the European Banking Authority (EBA).[21] The EBA responded on 23June 2022.[22] [23] Amendments to the Directive were planned for the fourth quarter of 2022.

The SEPA (Single Euro Payments Area) API Access Scheme initiative was launched by the ERPB (Euro Retail Payment Board), a strategic advisory body at the European Central Bank.[24] The initiative was described in two reports, the first was published on 31 May 2019,[25] and the second was published on 4 June 2021.[26] The information on the transfer of the initiative for further works and the implementation of the SEPA API Access scheme by the European Payments Council is also publicly available.[27]

The proposed scheme defines the principles of cooperation between the entities participating in it and defines standard methods of implementing selected services based on the use of APIs, billing systems, and payment systems. The starting point for the work on the scheme was PSD2 services provided by European credit institutions, which would remain free of charge for third parties. Other services – referred to as value-added services, premium services or extended services – could be monetised by credit institutions based on the rules adopted in the scheme. These rules and the general assumptions of the scheme would be discussed with the relevant Directorates-General of the European Commission.

On 26 October 2020, The Berlin Group established a new task force called The Berlin Group openFinance API Framework, which replaced the previous task force responsible for creating the NextGenPSD2 standard.[28] The new task force's work focuses on the standardisation of value-added services that credit institutions may make available to eligible third parties based on bilateral agreements or potential new payment schemes.

Standardisation initiatives include:

Latin America

Mandatory and centralised electronic invoicing was implemented relatively early in countries such as Mexico, Chile, Colombia, and to a lesser extent, Brazil, offering the possibility to retrieve open accounting data in a similar way as open banking.[33]

The Central Bank of Brazil deployed its open banking model, which mandates banks and financial institutions (including fintech) to make available information on traditional financial services and products. Brazil's implementation is mandatory for institutions with large sizes, significant international activity, and high-risk profiles, and optional for all other institutions. The implementation of the first phase happened almost two years after the first open banking framework was published in April 2019, in which the fundamental requirements for the implementation of the law were disclosed. The Central Bank of Brazil outlined the following phases of implementation:

In late 2020, the Chilean government announced that it was working on a proposal for fintech regulation and the incorporation of an open banking standard. The government edited the Financial Portability Act, a set of regulations aimed to facilitate the switch between banks and financial providers.[34] [35] On 4 January 2023, Chile enacted a law with the aim to establish a regulatory framework for fintech activity and create an open finance system that enables secure data-sharing.

Colombia has established a voluntary model for open banking,[36] with the Financial Regulation Unit (URF)'s goal being to foster public-private discussion.[37]

Mexico was the first Latin American country to implement open banking legislation.[38] On 9 March 2018, the Fintech Law of 2018 was published in the Federal Official Gazette (DOF;).[39] Article 76 states that standardised APIs must be established to enable connectivity and access to other interfaces. As a consequence, more than 2,300 institutions were technically required to share information.[40] Article 76 provides that certain information may be shared by financial institutions, money transmitters, Credit Information Companies (SIC;), clearing houses, and financial technology institutions. Those types of data are open data (related to products and services offered to the general public), aggregated data (related to any type of statistical information related to operations), and transactional data (related to the use of a product or service).

On 10 March 2020, the Mexican Central Bank (Banxico) published Circular 2/2020 in the DOF. Circular 2/2020 outlined secondary provisions of the law, specifically dealing with open banking.[41] Different financial market entities were required to share information through APIs. The secondary provisions only apply to SICs and clearing houses; Circular 2/2020 states that both SICs and clearing houses must obtain authorisation from Banxico for the use of the APIs by other institutions. In turn, SICs and clearing houses must enter into agreements with other entities authorised by Banxico for the exchange of information. Additionally, the issuance of fees to be charged between institutions that exchange information is also defined. Circular 2/2020 states that in case of non-compliance with the provisions of Circular 2/2020, SICs and clearing houses may face fines levied by Banxico.

In June 2020, the rules for exchanging open data were applicable to all financial institutions – banks, fintechs, and companies authorised by the Comisión Nacional Bancaria y de Valores.

United Kingdom

In August 2016, the Competition and Markets Authority (CMA) issued a ruling that required the nine biggest UK banks – HSBC, Barclays, RBS, Santander, Bank of Ireland, Allied Irish Bank, Danske Bank, Lloyds, and Nationwide – to allow licensed startups direct access to their data, down to the transaction level.[42] The direction came into force on 13 January 2018, using standards and systems created by Open Banking Limited, a non-profit created especially for the task, while enforcement rests with the CMA. Protection for consumers is the responsibility of the Financial Conduct Authority (FCA) for account information and payment initiation services (under the PSD2 directive), and the Information Commissioner's Office for data.[43] The CMA direction only applies to the nine largest banks, and works alongside the broader PSD2 rules that apply to all payment account providers.

, there are 339 FCA-regulated providers enrolled in open banking.[44] Many of them provide financial apps that help manage finances; others are consumer credit firms who use open banking to access account information for affordability checks and verification.[45]

In March 2021, the CMA consulted on arrangements for the future oversight of open banking.[46] This consultation referenced a proposal by UK Finance (a trade association for the banking and finance industry), which had engaged with stakeholders to develop a blueprint for a new organisation (a 'Future Entity') to replace Open Banking Limited, which would serve the needs of the significantly larger number of financial institutions by enabling an Open Data and payments market.

United States

In 2021, president Joe Biden issued an executive order indicating the administration's desire to begin rulemaking for Section 1033 of the Dodd–Frank Act.[47] The intention was to support open banking initiatives in the United States. Also in 2021, open banking provider Plaid settled for US$58M in a consumer-driven, privacy-related class-action lawsuit.[48] Rohit Chopra, the director of the Consumer Financial Protection Bureau, initiated rulemaking pertaining to Section 1033 in 2023.[49]

Notes and References

  1. Book: Premchand . A. . Choudhry . A. . 2018 International Conference on Communication, Computing and Internet of Things (IC3IoT) . Open Banking & APIs for Transformation in Banking . Feb 2018 . https://ieeexplore.ieee.org/document/8668107 . live . 25–29 . 10.1109/IC3IoT.2018.8668107 . 978-1-5386-2459-3 . 84185109 . https://web.archive.org/web/20230404205245/https://ieeexplore.ieee.org/document/8668107/ . 4 April 2023 . 15 May 2023.
  2. Web site: Open Banking Working Group . The Open Banking Standard . live . https://web.archive.org/web/20170418163531/https://www.paymentsforum.uk/sites/default/files/documents/Background%20Document%20No.%202%20-%20The%20Open%20Banking%20Standard%20-%20Full%20Report.pdf . 2017-04-18 . 2017-04-18 . HM Treasury . dmy-all.
  3. Web site: Brodsky . Laura . Oakes . Liz . September 2017 . Data sharing and open banking . live . https://web.archive.org/web/20171108035225/https://www.mckinsey.com/industries/financial-services/our-insights/data-sharing-and-open-banking . 2017-11-08 . 2017-11-07 . McKinsey & Company . dmy-all.
  4. News: When Open Innovation comes to banking - BNP Paribas . en-US . BNP Paribas . 2020-10-29 . 27 January 2021 . https://web.archive.org/web/20210127042701/https://group.bnpparibas/en/news/open-innovation-banking . live .
  5. Web site: 2018-04-03 . Open banking: The new face of digital transformation . 2020-10-29 . IBM RegTech Innovations Blog . en-US . 31 May 2021 . https://web.archive.org/web/20210531062320/https://www.ibm.com/blogs/regtech/open-banking-the-new-face-of-digital-transformation/ . live .
  6. Web site: Scholten . Ulrich . Banking-as-a-Service - what you need to know . 28 May 2020 . VentureSkies . 20 February 2019 . https://web.archive.org/web/20190220140414/http://www.ventureskies.com/blog/banking-as-a-service-categorizing-the-services . live .
  7. Web site: Press corner. 2021-09-08. European Commission - European Commission. en. 25 August 2020. https://web.archive.org/web/20200825095835/https://ec.europa.eu/commission/presscorner/home/en. live.
  8. Web site: European Parliament adopts European Commission proposal to create safer and more innovative European payments . EU Commission. 2016-05-04. https://web.archive.org/web/20160722052406/http://europa.eu/rapid/press-release_IP-15-5792_en.htm?locale=en. 2016-07-22. live.
  9. Web site: The Risks of Open Banking: Are Banks and their Customers Ready for PSD2? - Security News . www.trendmicro.com . 15 May 2023 . 9 May 2023 . https://web.archive.org/web/20230509043932/https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/the-risks-of-open-banking-are-banks-and-their-customers-ready-for-psd2 . live .
  10. Web site: Reynolds . Faith . 2017 . Open Banking: A consumer perspective . Barclays . 15 May 2023 . 9 May 2023 . https://web.archive.org/web/20230509001918/https://home.barclays/content/dam/home-barclays/documents/citizenship/access-to-financial-and-digital-empowerment/Open-Banking-A-Consumer-Perspective-Faith-Reynolds.pdf . live .
  11. Web site: Kevin Peachey . etal . 21 November 2017 . The Disruptors - Money . live . https://web.archive.org/web/20171121074316/http://www.bbc.co.uk/news/resources/idt-sh/The_disruptors_money_changing . 2017-11-21 . 21 November 2017 . BBC News . dmy-all.
  12. News: Moses-Ashike . Hope . Explainer: What to know about Open Banking . 22 May 2023 . Business Day . 9 March 2023.
  13. News: Central Bank of Nigeria . Regulatory Framework for Open Banking in Nigeria . 22 Jan 2024 . Central Bank of Nigeria . 17 February 2021.
  14. News: Central Bank of Nigeria . Operational Guidelines for Open Banking in Nigeria . 22 Jan 2024 . Central Bank of Nigeria . 7 March 2023.
  15. News: June 29, 2019 . Open banking era dawns in Australia . . dmy-all . 15 May 2023 . 31 January 2021 . https://web.archive.org/web/20210131071831/https://www.sbs.com.au/news/open-banking-era-dawns-in-australia . live .
  16. Web site: O'Brien . Kate . ASX shares that could benefit from Open Banking . 31 October 2019 . Yahoo! Finance . Yahoo . dmy-all . 31 October 2019 . https://web.archive.org/web/20191031062219/https://au.finance.yahoo.com/news/asx-shares-could-benefit-open-225455924.html . dead .
  17. News: Open banking coming to NZ mid-2024 . May 30, 2023 . Radio New Zealand.
  18. Web site: Press corner. 2021-09-08. European Commission - European Commission. en. 25 August 2020. https://web.archive.org/web/20200825095835/https://ec.europa.eu/commission/presscorner/home/en. live.
  19. Web site: European Parliament adopts European Commission proposal to create safer and more innovative European payments . EU Commission. 2016-05-04. https://web.archive.org/web/20160722052406/http://europa.eu/rapid/press-release_IP-15-5792_en.htm?locale=en. 2016-07-22. live.
  20. Web site: Payment services – review of EU rules . 2023-05-08 . European Commission . en . 26 April 2023 . https://web.archive.org/web/20230426095312/https://ec.europa.eu/info/law/better-regulation/ . live .
  21. Web site: Call for advice to the European Banking Authority (EBA) on the review of the payment services Directive (PSD2) . 2023-05-08 . finance.ec.europa.eu . en . 11 May 2023 . https://web.archive.org/web/20230511173104/https://finance.ec.europa.eu/publications/call-advice-european-banking-authority-eba-review-payment-services-directive-psd2_en . live .
  22. Web site: Campa . José Manuel . 2022-06-23 . 2022 06 23 Letter to Mr Berrigan - Response PSD2 CfA . European Banking Authority . 15 May 2023 . 8 May 2023 . https://web.archive.org/web/20230508035303/https://www.eba.europa.eu/sites/default/documents/files/document_library/Publications/Opinions/2022/Opinion%20od%20PSD2%20review%20%28EBA-Op-2022-06%29/1036015/2022%2006%2023%20Letter%20to%20Mr%20Berrigan%20-%20Response%20PSD2%20CfA.pdf . live .
  23. Web site: 2022-06-23 . Opinion of the European Banking Authority on its technical advice on the review of Directive (EU) 2015/2366 on payment services in the internal market (PSD2) . European Banking Authority . 15 May 2023 . 8 May 2023 . https://web.archive.org/web/20230508035430/https://www.eba.europa.eu/sites/default/documents/files/document_library/Publications/Opinions/2022/Opinion%20od%20PSD2%20review%20%28EBA-Op-2022-06%29/1036016/EBA%27s%20response%20to%20the%20Call%20for%20advice%20on%20the%20review%20of%20PSD2.pdf . live .
  24. Web site: 2021-12-02. Euro Retail Payments Board (ERPB). 2022-02-14. European Central Bank. en. 4 April 2023. https://web.archive.org/web/20230404121601/https://www.ecb.europa.eu/paym/groups/erpb/html/index.en.html. live.
  25. Web site: 2019-05-31 . Report of the ERPB Working Group on a Single Euro Payments Area (SEPA) Application Programming Interface (API) Access Scheme . Euro Retail Payments Board . 15 May 2023 . 10 May 2023 . https://web.archive.org/web/20230510013126/https://www.ecb.europa.eu/paym/groups/erpb/shared/pdf/11th-ERPB-meeting/Report_from_the_ERPB_WG_on_a_SEPA_API_Access_Scheme.pdf?18ac5087de445faeb7ca11f951bb7ca11f951bb7ca11f951bb7ca . live .
  26. Web site: 2021-06-04 . Report of the Next Phase of the ERPB Working Group on a Single Euro Payments Area (SEPA) Application Programming Interface (API) Access Scheme . Euro Retail Payments Board . 15 May 2023 . 27 December 2022 . https://web.archive.org/web/20221227142743/https://www.ecb.europa.eu/paym/groups/erpb/shared/pdf/15th-ERPB-meeting/Report_from_the_ERPB_working_group_on_a_SEPA_API_Access_Scheme.pdf?52770756ac64f8952873a76 . live .
  27. https://www.ecb.europa.eu/paym/groups/erpb/shared/pdf/16th-ERPB-meeting/SEPA_Payment_Account_Access_Scheme_status_update.pdf%20https://www.ecb.europa.eu/paym/groups/erpb/html/index.en.html
  28. Web site: Group. The Berlin. 2020-10-26. PRESS RELEASE - Berlin Group starts new openFinance API Framework. 2022-02-14. the-berlin-group. en. 14 May 2023. https://web.archive.org/web/20230514064013/https://www.berlin-group.org/single-post/press-release-berlin-group-starts-new-openfinance-api-framework. live.
  29. Web site: PSD2 Access to Bank Accounts The Berlin Group . 2022-02-14 . the-berlin-group . en . 14 May 2023 . https://web.archive.org/web/20230514063913/https://www.berlin-group.org/psd2-access-to-bank-accounts . live .
  30. Web site: 2018-05-30 . Stet : PSD2 . 2022-02-14 . Stet . en . 4 April 2023 . https://web.archive.org/web/20230404104102/https://www.stet.eu/index.php?id=49 . live .
  31. Web site: Slovak Banking API Standard . 2022-02-14 . SBA - Slovenská banková asociácia . sk . 21 March 2023 . https://web.archive.org/web/20230321092731/https://www.sbaonline.sk/projekt/slovak-banking-api-standard/ . live .
  32. Web site: PolishAPI . 2022-02-14 . polishapi.org . en-US . 7 May 2023 . https://web.archive.org/web/20230507165330/https://polishapi.org/en/ . live .
  33. Web site: 2018-03-14 . CFDI: Mexico's Electronic Invoicing Model That's Become a Reference Across all of Latin America . 2021-05-23 . Edicom CFDI . en-US . 31 May 2021 . https://web.archive.org/web/20210531062119/https://cfdi.edicomgroup.com/en/cfdi-al-dia-en/cfdi-mexicos-electronic-invoicing-model-thats-become-a-reference-across-all-of-latin-america/ . live .
  34. Web site: BNamericas - Chile financial portability bill becomes law . 2021-05-23 . BNamericas.com . 12 May 2023 . https://web.archive.org/web/20230512070630/https://www.bnamericas.com/en/news/chile-financial-portability-bill-becomes-law . live .
  35. Web site: Gob.cl - Portabilidad Financiera . 2021-05-23 . Gobierno de Chile . es . 4 April 2023 . https://web.archive.org/web/20230404170551/https://www.gob.cl/portabilidadfinanciera/ . live .
  36. Web site: 2021-02-08 . Open banking en Colombia se prepara para despegar . 2021-05-23 . iupana . es-ES . 4 April 2023 . https://web.archive.org/web/20230404184828/https://iupana.com/2021/02/08/open-banking-en-colombia/ . live .
  37. Web site: BNamericas - Snapshot: The 2021 agenda for Colombia finan... . 2021-05-23 . BNamericas.com . 12 May 2023 . https://web.archive.org/web/20230512071109/https://www.bnamericas.com/en/news/snapshot-the-2021-agenda-for-colombia-financial-regulations-research-unit-urf . live .
  38. Web site: LatAm turns to Mexico's year-old fintech law as a model for regulation . 2021-05-23 . www.spglobal.com . en-us . 12 May 2023 . https://web.archive.org/web/20230512072405/https://www.spglobal.com/marketintelligence/en/news-insights/latest-news-headlines/latam-turns-to-mexico-s-year-old-fintech-law-as-a-model-for-regulation-50081755 . live .
  39. Web site: 2018-03-09 . Ley para Regular las Instituciones de Tecnología Financiera . Law to Regulate Financial Technology Institutions . es . 15 May 2023 . 20 March 2021 . https://web.archive.org/web/20210320072622/http://www.diputados.gob.mx/LeyesBiblio/pdf/LRITF_090318.pdf . live .
  40. Web site: Garzón Galván . Jonathan G. . Open Banking MX Reporte 2019 . Cecoban . 15 May 2023 . 4 April 2023 . https://web.archive.org/web/20230404065940/https://www.cecoban.com/Reporte_Open_Banking_MX_2019_Cecoban.pdf . live .
  41. Web site: Interfaces de programación, disposiciones, Banco de México . 2021-05-23 . www.banxico.org.mx . 4 April 2023 . https://web.archive.org/web/20230404065940/https://www.banxico.org.mx/marco-normativo/normativa-emitida-por-el-banco-de-mexico/circular-2-2020/interfaces-programacion-dis.html . live .
  42. To change how you use money, Open Banking must break banks . October 16, 2017 . Condé Nast . Wired UK . Rowland . Manthorpe . 2017-12-29 . https://web.archive.org/web/20171222104615/http://www.wired.co.uk/article/open-banking-psd2-regulation-banking . 2017-12-22 . live . dmy-all.
  43. What is Open Banking and PSD2? Wired explains. . . . Rowland . Manthorpe . 17 April 2018 . dmy-all . 15 May 2023 . 30 January 2021 . https://web.archive.org/web/20210130123443/https://www.wired.co.uk/article/open-banking-cma-psd2-explained . live .
  44. Web site: Meet the regulated providers . Open Banking Implmentation Entity . 15 May 2023 . 27 January 2021 . https://web.archive.org/web/20210127065950/https://www.openbanking.org.uk/customers/regulated-providers/ . live .
  45. Book: Yang. Qiang. Federated Learning: Privacy and Incentive. Fan. Lixin. Yu. Han. 2020. Springer Nature. 978-3-030-63076-8. en.
  46. Web site: 25 March 2022 . The future oversight of the CMA's open banking remedies . live . https://web.archive.org/web/20230404090712/https://www.gov.uk/government/consultations/future-oversight-of-the-cmas-open-banking-remedies/the-future-oversight-of-the-cmas-open-banking-remedies . 4 April 2023 . 15 May 2023 . Competition and Markets Authority.
  47. Web site: President Biden Issues Executive Order Encouraging CFPB To Act On 1033 Data Access and UDAAP. JD Supra. 15 May 2023. 14 May 2023. https://web.archive.org/web/20230514234044/https://www.jdsupra.com/legalnews/president-biden-issues-executive-order-5700505/. live.
  48. Web site: Plaid settles class-action lawsuit for $58 million. 6 August 2021. 15 May 2023. 4 April 2023. https://web.archive.org/web/20230404104057/https://www.americanbanker.com/news/plaid-settles-class-action-lawsuit-for-58-million. live.
  49. Web site: 2023-10-19 . The power to walk away: CFPB moves to give consumers control over financial data . 2023-12-24 . POLITICO . en.

This article is licensed under the GNU Free Documentation License. It uses material from the Wikipedia article "Open banking".

Except where otherwise indicated, Everything.Explained.Today is © Copyright 2009-2024, A B Cryer, All Rights Reserved. Cookie policy.