The European Commission’s financial data access framework illustrates how regulators are considering customer-controlled data sharing across banking, insurance, investments and other services.
Open banking was the starting point
Open banking generally refers to controlled access to payment-account data and payment initiation through regulated third parties. APIs allow a customer to connect a fintech service to a bank relationship without handing the fintech their banking password.
Open finance takes the concept further. Instead of limiting access to payment accounts, a wider framework can cover data from products such as savings, loans, investments, pensions and insurance, subject to the rules and permissions that apply in a jurisdiction.
The European approach
The European Commission has proposed a Framework for Financial Data Access, known as the open-finance initiative, to create clearer rights and obligations for customer-data sharing across a wider range of financial services. The proposal emphasises customer control, standardised data and technical interfaces, alongside data protection.
The Commission presents the framework as a way to encourage competition and new financial products. It also recognises that data access needs rules: customers should control who receives their information and for what purpose.
What new products could be built
Once authorised data can move reliably between providers, fintech companies can build tools that aggregate a customer’s financial position across institutions. A budgeting service could combine multiple accounts. A business-finance platform could reconcile bank data with accounting information. An insurance or lending service could potentially automate parts of an application process using permitted financial information.
The value comes from reducing the cost of moving information. Today, many financial processes still depend on documents, manual uploads and repeated verification. Standardised APIs can make the process more continuous.
The privacy problem is as important as the API
Financial data is highly sensitive. A framework that makes sharing easier can also make it easier for customers to share more information than they intended, or for a data user to create profiles that have consequences beyond the original purpose.
Consumer-protection groups have therefore raised concerns about misuse, discrimination, exclusion and misleading commercial practices. Open finance needs granular permission, clear purpose limitation, revocation controls and transparency about what happens to data after it is accessed.
Why this matters to fintech strategy
Open finance can lower the technical barriers to building multi-provider financial products, but access alone does not create trust. Providers need secure authentication, clear consent flows, reliable APIs and a business model that gives customers a reason to share data.
The competitive advantage may ultimately move from simply possessing data to using authorised data responsibly. Fintech companies that make financial information easier to understand while giving users meaningful control can turn data portability into a product benefit rather than merely a regulatory requirement.
What to watch next
For fintech teams, investors and users, the important question is no longer whether financial services will become more digital. The practical questions are how quickly new infrastructure can scale, how safely it can be operated, and which parts of the customer experience genuinely improve as a result. Regulation, interoperability, fraud controls, resilience and transparent pricing will remain as important as product design.
