Open banking within the UK has been one of many massive winners of Brexit. The UK has shortly grow to be a posterchild for open banking success, and that has so much to do with how the UK authorities, the tech sector and the monetary markets labored all collectively like grownups to transcend Europe’s Second Fee Companies Directive (PSD2) within the aftermath of Brexit.
Nonetheless, open banking nonetheless has a protracted option to go to assist advance monetary literacy, develop belief, and improve engagement between shoppers and monetary establishments, writes Roxana Mohammadian-Molina, chief technique officer at Mix, fintech investor and entrepreneur. A belated overhaul of UK knowledge safety legal guidelines may propel our open banking business to new highs.

The Common Information Safety Regulation (GDPR) was adopted by the UK on the precipice of Brexit in April 2016 and got here into pressure in Could 2018. Since then, its impression has been clear – from high-profile fines in opposition to a number of the largest corporations on this planet, to heightened client consciousness of the significance of defending knowledge and the tasks of knowledge processing corporations.
However its critics, led by a number of Prime Ministers over the previous 5 years, have constantly argued that the GDPR necessities are overly stringent and pressure extreme quantities of documentation on organisations, shackling companies by pointless purple tape.
Below Boris Johnson’s premiership, the federal government seemed to introduce the Information Reform Invoice, a brand new set of knowledge safety necessities to exchange GDPR and provides organisations extra flexibility round how they handle knowledge dangers.
However the proposed laws was paused through the market turmoil that adopted the ‘Mini Finances’. Now Rishi Sunak has a possibility to breath new life into open banking by making a enterprise and consumer-friendly knowledge rights regime that can assist us create a brand new pro-growth and trusted UK knowledge safety framework based mostly on frequent sense. An extended opponent of retaining GDPR, Mr Sunak has often voiced his dedication to rising the UK tech sector, slashing purple tape, and supporting funding.
On the identical web page
On the floor, it’d look as if open banking and privateness are on a collision course because the former’s definition is to supply third-party entry to our monetary knowledge via APIs. However take a deeper look and it shortly turns into clear that open banking and knowledge safety laws have comparable goals – giving customers and companies larger management over their knowledge.
The important thing phrase is consent. Whereas GDPR goals to minimise all knowledge sharing and defend shoppers’ privateness in any respect prices, open banking is constructed upon the concept that monetary establishments can allow third events, typically fintechs, to immediately entry shoppers’ account data and provide new monetary providers so long as prior buyer consent has been given.
It’s straightforward to see the potential advantages of open banking: improved experiences for patrons, new revenue streams for corporations and a sustainable service mannequin for underserved markets. It is usually straightforward to see how this triple-win sits on the coronary heart of what Brexit stands for, the pro-growth British society it’s rooted in, and the agile and dynamic tech ecosystem it represents.
Taking again management of regulation
The enterprise of regulating is a difficult job and reaching regulatory excellence much more so. However given the current crossroad we discover ourselves in, the stakes of getting it proper are very excessive. We have to work out what we’d like from an information regime framework over the subsequent 10 or 20 years, if the UK and London are to stay main centres of finance and open banking. It means our regulators will want be extra forward-thinking, and actually familiarize yourself with knowledge and the expertise aspect of monetary providers extra broadly, in addition to being extra pragmatic.
However let’s be clear, I’m not suggesting, God forgive, that we go for a lawless knowledge regime. As an alternative, what I’m saying is that we’ve a possibility to maneuver away from a ‘tick-box strategy’ to knowledge safety, and as a substitute give attention to substance by simplifying sure provisions to allow innovation, significantly in open banking. That can assist us take away the burdens of GDPR to create essentially the most dynamic and agile knowledge safety regime on this planet.
Does that imply we’d like a primary framework to make sure shoppers’ and companies’ knowledge are protected? It completely does. From acquiring consent to switch private knowledge, to making sure that the API via which monetary establishments share that non-public knowledge with third events meets safety necessities, to making sure that monetary establishments implement the ‘proper to be forgotten’ – shoppers’ and companies’ proper to have their private knowledge erased.
As I’ve mentioned earlier than, the important thing phrase is consent. In fact, the danger is that if the EU and different nations don’t recognise any future knowledge safety regime put in by the UK as providing comparable protections, the circulation of knowledge between them and the UK may grow to be severely restricted. This may have severe implications for companies working throughout markets. Nonetheless, this threat could be mitigated by constructing a world-class knowledge safety regime that absolutely helps our main digital economic system.
To conclude, Mr Sunak’s authorities has an actual alternative to create a enterprise and consumer-friendly knowledge rights regime that work higher for everybody, and by doing so, to breathe new life into the UK’s Open Banking success story. To try this, the yin of regulation and the yang of competitors want to realize a harmonising steadiness that highlights our benefits over the remainder of the world.