Open finance

Open finance allows for a customer's financial data to be shared between financial institutions and third-party service providers through the use of Application Programming Interfaces (APIs).

Open finance seeks to afford consumers and businesses enhanced control over their financial information, enabling access to a broader spectrum of financial products and services. This encompasses data sharing that extends past conventional banking, which was the focus of open banking, to cover domains such as investments, pensions, mortgages, and insurance. Applications include financial information aggregation, comparison of financial products, and services supporting lender decisions.

Proposed benefits include increased competition, innovation, transparency, and customer control over financial information. Potential risks include unauthorised data use, privacy and security breaches, discriminatory treatment, and difficulties allocating responsibility among participating organisations.

Development

Traditionally, financial information has been held within closed systems of individual financial institutions. Customers who wish to use information across providers have at times depended on manual records, downloaded statements, or services that employ screen scraping to retrieve information from websites. Screen scraping techniques proved unreliable and generated security concerns, because they depend on parsing website data that had not been designed for programmatic access.

Regulatory initiatives that support open banking created a more structured means for third parties to access bank account data. In the United Kingdom, the Competition and Markets Authority's 2017 retail banking order obligated the nine largest current-account providers to adopt common standards for customer-authorised access to account information. In the European Union, the revised Payment Services Directive 2 (PSD2) set out a framework for third-party access to payment account information and for payment initiation. Open finance subsequently emerged as a broader concept encompassing financial information beyond payment accounts.

The Organisation for Economic Co-operation and Development (OECD) has characterised the shift from open banking towards open finance as an expansion of both the sources and the types of financial information that may be shared. The development of such arrangements has not conformed to a single international model: certain countries have imposed mandatory requirements, whereas others have relied on voluntary industry standards or are in the process of developing legislation.

Operation and governance

Open finance arrangements typically comprise a data holder (for example, a bank or insurer), a customer, and a data recipient (for example, another financial institution or a financial technology provider).

Under the applicable framework, the customer is able to authorise the recipient to obtain specified information for a defined purpose. Access can be administered via authentication, consent records, and mechanisms for modifying or withdrawing permission.

A conceptualisation comparing the scope of open banking, open finance and smart data

Standardized APIs enable organisations to exchange information without disclosing customers' account passwords. Technical specifications define data formats, how organisations are identified, authentication methods, and security requirements. Interoperability rests on both the availability of data and the capacity of different systems to interpret that data consistently. Frameworks can set out rules governing the permitted use of data, data retention, complaints, liability, and compensation.

The label open does not imply that an individual's financial records become publicly accessible. Instead, it denotes mechanisms for accessing and sharing information under defined conditions. The degree of customer control, the categories of covered data, and the obligations imposed on firms vary according to the laws or contractual arrangements of each system.

Applications

One use of open finance involves aggregating information obtained from various financial providers. Where access is available, a service may combine data on current accounts, borrowing, investment holdings and pension arrangements in order to provide an overview of a customer's financial position. Further potential applications include assisting customers in comparing financial products, transferring information when they change providers, and receiving financial guidance grounded in more than one account or product.

Access to customer information drawn from multiple sources may assist lenders in assessing creditworthiness and affordability. Small and medium-sized enterprises may be able to draw on financial records held by various institutions in support of loan applications. Research into the earlier development of open banking in the United Kingdom identified evidence of new lending relationships between small businesses and financial technology firms, although its findings do not establish that every open finance scheme will produce the same outcomes.

Regulatory approaches

Asia-Pacific

Australia's Consumer Data Right (CDR) constitutes an economy-wide framework for data sharing that originated in the banking sector in July 2020 and was later extended to energy. Obligations regarding product data sharing commenced for relevant providers on 13 July 2026, including the public comparability of interest rates, fees, and product features. With the exception of complex requests, consumer data sharing obligations begin on 9 November 2026 for participating non-banking lenders. These are lenders whose combined resident loans and finance leases reported to the Australian Prudential Regulation Authority (APRA) as of 4 March 2025 exceed $10 billion. Consumer data sharing obligations commence on 10 May 2027 for large non-bank lenders, again with complex requests excluded.

India's Account Aggregator (AA) framework was created through directions issued by the Reserve Bank of India in 2016. It facilitates the transfer of financial information, authorised by the customer, between regulated information providers and information users. By 2026, the network consisted of participants drawn from banking, securities, insurance and pensions, offering an illustration of financial data sharing spanning multiple sectors.

Singapore has established a government-supported collaborative model. The Singapore Financial Data Exchange (SGFinDex) uses a national digital identity system, Singpass, and a consent-based framework to enable the consolidation of financial information across government agencies and private financial institutions.

Americas

Brazil's Open Finance Brasil framework is regulated by the Central Bank of Brazil (BCB), under which participating financial and payment institutions exchange designated data and services subject to customer authorisation. The framework was rolled out in stages, encompassing information on financial products, customer and transaction data, and services including payment initiation. Its provisions cover consent, interoperability, security and the participation requirements applicable to regulated institutions.

Chile created a statutory foundation for open finance through its Fintech Act. The Financial Market Commission published an implementation framework, including regulation and technical specifications. In June 2026, the regulator deferred the system's commencement until July 2027, in order to allow for additional implementation time.

In Canada, the Consumer-Driven Banking Act received Royal Assent in March 2026 and superseded earlier legislation introduced in 2024. This Act provides a statutory framework for customer-directed sharing of financial data, with the Bank of Canada appointed to oversee participating entities.

In the United States, the Consumer Financial Protection Bureau issued its Personal Financial Data Rights Rule in October 2024 pursuant to section 1033 of the Dodd-Frank Wall Street Reform Act 2010. A federal court stayed the rule's compliance dates on 29 October 2025 leaving the implementation timetable unclear.

Europe

The European Commission proposed the regulation for Financial Data Access (FiDA) in June 2023. Under this proposal, rules would be set out for accessing customer information held in financial sector segments that open banking requirements do not cover, including for certain insurance, investment, loan, and pension information. A negotiating position was agreed by the Council of the European Union in December 2024. FiDA has not yet been established as an operational EU-wide framework.

In the United Kingdom, powers to create or support smart data schemes spanning multiple sectors were introduced by the Data (Use and Access) Act 2025. An open finance roadmap was issued by the Financial Conduct Authority (FCA) in April 2026, outlining work that extends through 2030. Lending to small and medium-sized enterprises and access to mortgages were named as the first areas for examination, with the Framework Design and Coordination phase beginning in 2027. Research assessing possible technical infrastructure models was published by the FCA in September 2026. The roadmap sets out a phased programme, rather than a single operational scheme encompassing all categories of financial data.

Potential benefits and risks

Advocates of open finance contend that broader access to data authorised by consumers could lower information barriers among providers, foster competition and underpin services adapted to individual circumstances. Proponents argue that the benefits include simpler comparison of financial products, improved financial management, and alternative sources of information for lending decisions. However, the implementation and design of open finance frameworks, industry participation, data quality, and consumer trust are considered important factors in ensuring the realisation of such benefits.

There are potential privacy, consumer protection and operational risks associated with open finance. Sharing information among a greater number of organisations can heighten exposure to data breaches, fraud and the use of information beyond the purposes anticipated by customers. More granular financial profiles may enable discriminatory pricing or the exclusion of particular customers, especially where automated decisions rest on biased or incomplete information. Customers who are reluctant or unable to share their data may encounter fewer options or less favourable offers.

Implementation gives rise to further questions regarding the cost of maintenance, the reliability and comparability of data, the allocation of liability, and whether data holders should receive compensation for granting access. Although interoperability may lower barriers to entry, an increase in competition is not assured. Some argue that organisations with pre-existing customer relationships, extensive technical infrastructure or access to multiple data sources may gain unfair competitive advantages. 

International organisations have consequently stressed the importance of effective governance, consumer protection, clear liability arrangements and proportionate technical standards in the development of open finance frameworks.

See also

References

  1. 1 2 OECD (27 January 2023). Shifting from open banking to open finance: Results from the 2022 OECD survey on data sharing frameworks (Report). OECD Business and Finance Policy Papers. OECD. doi:10.1787/9f881c0c-en.
  2. ↑ Grassi, Laura (1 September 2024). "In a world of Open Finance, are customers willing to share data? An analysis of the data-driven insurance business". Eurasian Business Review. 14 (3): 727–753. doi:10.1007/s40821-024-00263-w. hdl:11311/1262483. ISSN 2147-4281.
  3. ↑ OECD (27 January 2023). Shifting from open banking to open finance: Results from the 2022 OECD survey on data sharing frameworks (Report). OECD Business and Finance Policy Papers. Paris: OECD. doi:10.1787/9f881c0c-en.
  4. ↑ "Customer data access and fintech entry: early evidence from open banking" (PDF). Bank of England Staff Working Paper. 1059. 2024.
  5. ↑ Jevglevskaja, Natalia; Buckley, Ross P. (2023). "Screen Scraping of Bank Customer Data: A Lamentable Practice". SSRN Electronic Journal. doi:10.2139/ssrn.4382528. ISSN 1556-5068.
  6. ↑ "Retail Banking Market Investigation Order 2017". GOV.UK. 15 May 2020. Retrieved 3 November 2026.
  7. ↑ Bank, European Central (5 October 2018). "The revised Payment Services Directive (PSD2)". European Central Bank. Retrieved 3 November 2026.
  8. ↑ "finance-2022-open-finance - European Commission". finance.ec.europa.eu. Retrieved 29 April 2024.
  9. ↑ Zachariadis, Markos; Ozcan, Pinar (2016). "The API Economy and Digital Transformation in Financial Services: The Case of Open Banking". SSRN Electronic Journal. doi:10.2139/ssrn.2975199. ISSN 1556-5068.
  10. 1 2 3 OECD (21 November 2023). Open finance policy considerations (Report). OECD Business and Finance Policy Papers. Paris: OECD. doi:10.1787/19ef3608-en.
  11. ↑ "Open banking and open finance". FCA. 1 December 2025. Retrieved 3 November 2026.
  12. ↑ Zetzsche, Dirk A; Arner, Douglas W; Buckley, Ross P (20 September 2020). "Decentralized Finance". Journal of Financial Regulation. 6 (2): 172–203. doi:10.1093/jfr/fjaa010. hdl:10.1093/jfr/fjaa010. Retrieved 13 November 2024.
  13. ↑ "Open Everything Diagram". Open Banking. Retrieved 13 November 2024.
  14. ↑ Premchand, Anshu; Choudhry, Anurag (20 September 2018). "Open Banking & APIs for Transformation in Banking". 2018 International Conference on Communication, Computing and Internet of Things (IC3IoT). IEEE. pp. 25–29. doi:10.1109/IC3IoT.2018.8668107. ISBN 978-1-5386-2459-3.
  15. ↑ Rubinfeld, Daniel (1 April 2024). "Data portability and interoperability: An E.U.-U.S. comparison". European Journal of Law and Economics. 57 (1): 163–179. doi:10.1007/s10657-023-09781-w. ISSN 1572-9990.
  16. ↑ Brown, Ian (27 October 2022). "The UK's Midata and Open Banking programmes: A case study in data portability and interoperability requirements". Technology and Regulation. 2022: 113–123. doi:10.26116/techreg.2022.011. ISSN 2666-139X.
  17. ↑ Mayernik, Matthew (4 July 2017). "Open data: Accountability and transparency". Big Data and Society. 4 (2): 205395171771885. doi:10.1177/2053951717718853. ISSN 2053-9517.
  18. ↑ Key Considerations for Open Finance. CGAP, BIS, IMF, UNSGSA, and World Bank. Retrieved 2026-11-03.
  19. ↑ "Retail banking market investigation". GOV.UK. 20 January 2026. Retrieved 3 November 2026.
  20. ↑ "What is CDR?". Consumer Data Right. 21 June 2024. Archived from the original on 4 May 2025. Retrieved 21 June 2024.
  21. ↑ CDR in the non-bank lenders sector. Consumer Data Right. Retrieved 2026-11-03.
  22. ↑ "Master Directions - Reserve Bank of India". www.rbi.org.in. Retrieved 3 November 2026.
  23. ↑ "Account Aggregator Framework | Department of Financial Services | Minsitry of Finance | Government of India". financialservices.gov.in. Retrieved 3 November 2026.
  24. ↑ "Singapore Financial Data Exchange (SGFinDex)". www.mas.gov.sg. Retrieved 3 November 2026.
  25. ↑ "Banco Central do Brasil". www.bcb.gov.br (in Brazilian Portuguese). Retrieved 3 November 2026.
  26. ↑ Open Finance Governance Framework. World Bank Group. Retrieved 2026-11-03.
  27. ↑ CMF begins implementation of Fintech Act. La Comisión para el Mercado Financiero (CMF). Retrieved 2026-11-03.
  28. ↑ CMF amends regulation on Open Finance System, incorporates Technical Annex. La Comisión para el Mercado Financiero (CMF). Retrieved 2026-11-03.
  29. ↑ Branch, Legislative Services (18 June 2026). "Consolidated federal laws of Canada, Consumer-Driven Banking Act". laws-lois.justice.gc.ca. Retrieved 3 November 2026.
  30. ↑ "Required Rulemaking on Personal Financial Data Rights". Consumer Financial Protection Bureau. 27 August 2025. Retrieved 3 November 2026.
  31. ↑ Maltz, Rachel (29 October 2025). "Joint Statement on Court's Decision to Stay Section 1033 Compliance Deadline". Bank Policy Institute. Retrieved 3 November 2026.
  32. ↑ "Framework for financial data access - Finance - European Commission". finance.ec.europa.eu. Retrieved 3 November 2026.
  33. ↑ Pflücke, Felix (8 October 2024). "Data Access and Automated Decision-Making in European Financial Law". European Journal of Risk Regulation. 16: 11–23. doi:10.1017/err.2024.60. ISSN 1867-299X.
  34. ↑ "The Financial Data Access (FiDA) Regulation". www.financial-data-access.com. Retrieved 3 November 2026.
  35. ↑ Data (Use and Access) Act 2025. . legislation.gov.uk. Retrieved 2026-11-03.
  36. ↑ The Data Use and Access Act 2025. ICO. Retrieved 2026-11-03.
  37. ↑ "Data (Use and Access) Act 2025: data protection and privacy changes". GOV.UK. Retrieved 3 November 2026.
  38. ↑ "Open finance roadmap: our vision for a smart data future". FCA. 13 April 2026. Retrieved 3 November 2026.
  39. ↑ "Powering open finance infrastructure". FCA. 22 September 2026. Retrieved 3 November 2026.
  40. ↑ "Unlocking the Potential of Open Finance in the UK" (PDF). Boston Consulting Group. 1 March 2023.
  41. ↑ "The Opportunity of Open Finance: Progress Update from the Centre for Finance, Innovation and Technology's first Coalition" (PDF). CFIT. 1 December 2023. Retrieved 21 June 2024.
  42. ↑ Open Innovation in the Financial Services. 2009. doi:10.1007/978-3-540-88231-2. ISBN 978-3-540-88230-5.
  43. ↑ Open finance | Weighing the risks and benefits for consumers. BEUC: The European Consumer Organisation. Retrieved 2026-11-03.
  44. ↑ Chomczyk Penedo, Andrés; Trigo Kramcsák, Pablo (1 September 2023). "Can the European Financial Data Space remove bias in financial AI development? Opportunities and regulatory challenges". International Journal of Law and Information Technology. 31 (3): 253–275. doi:10.1093/ijlit/eaad020. ISSN 0967-0769.
  45. ↑ "Open finance policy considerations". OECD Business and Finance Policy Papers. 36. 2023. doi:10.1787/19ef3608-en – via OECD.
  46. ↑ Policy Development and Implementation Guide for Inclusive Open Finance. AFI. Retrieved 2026-11-03.