BCBS Report on Open Banking and Application Programming Interfaces
BCBS published a report that monitors the evolving trend of open banking and application programming interfaces (APIs) in certain Basel Committee member jurisdictions. The report presents key trends and challenges identified in this area through the information gathered from 25 Basel Committee members from 17 jurisdictions, with focus on supervised banks and customer-permissioned data. The report also discusses the implications of these developments for banks and bank supervision. The report builds on the findings of BCBS paper on the implications of fintech developments for banks and bank supervisors.
The following are the key findings of the report with respect to the open banking frameworks:
- Traditional banking is evolving into open banking. A number of jurisdictions have adopted, or are considering adopting, open banking frameworks to require, facilitate, or allow banks to share customer-permissioned data with third parties.
- Open banking frameworks vary across jurisdictions in terms of stage of development, approach, and scope. Open banking is still in the early stages of development in a number of jurisdictions. Approximately half of the Basel Committee members have not observed significant open banking developments in their jurisdictions. There are benefits and challenges associated with each approach to open banking, when balancing bank safety and soundness, encouraging innovation, and consumer protection.
- Data privacy laws can provide a foundation for an open banking framework. Many jurisdictions that have adopted open banking frameworks also updated or plan to update their data protection and/or privacy laws.
- Multi-disciplinary features of open banking may require greater regulatory coordination. Within each jurisdiction, multiple authorities can have a role in addressing issues related to banks’ sharing of customer-permissioned data with third parties owing to the multi-disciplinary aspects of open banking.
Open banking comes with not only benefits but also various challenges for banks, such as risks to the business models and reputation and issues regarding data, cyber security, and third-party risk management. Therefore, banks and bank supervisors would need to pay more attention to the challenges that accompany the increased sharing of customer-permissioned data and growing connectivity of various entities involved in the provision of financial services. The report identifies the following key challenges for banks and supervisors:
- Challenges of adapting to the potential changes in business models
- Challenges of ensuring data and cyber-security in an open banking framework
- Time and cost to build and maintain APIs and the lack of commonly accepted API standards
- Oversight of third parties can be limited, especially in cases where banks have no contractual relationship with the third party, or where the third party has no regulatory authorization
- Assigning liability in the event of financial loss, or in the event of erroneous sharing or loss of sensitive data, which is more complex with open banking, as more parties are involved
- Increase in reputational risk, even in jurisdictions where there are established liability rules
Related Links
Keywords: International, Banking, Open Banking, API, Operational Risk, Governance, Fintech, Cyber Risk, BCBS
Featured Experts

María Cañamero
Skilled market researcher; growth strategist; successful go-to-market campaign developer

Nicolas Degruson
Works with financial institutions, regulatory experts, business analysts, product managers, and software engineers to drive regulatory solutions across the globe.

Patrycja Oleksza
Applies proficiency and knowledge to regulatory capital and reporting analysis and coordinates business and product strategies in the banking technology area
Previous Article
ESMA Updates Q&A on European Benchmarks Regulation in December 2019Related Articles
EC Consults on PSD2 and Open Finance; EU Reaches Agreement on DORA
The European Commission (EC) published a public consultation on the review of revised payment services directive (PSD2) and open finance.
EC Mandates ESAs to Propose Amendments to SFDR Technical Standards
The European Commission (EC) has issued two letters mandating the European Supervisory Authorities (ESAs) to jointly propose amendments to the regulatory technical standards under Sustainable Finance Disclosure Regulation or SFDR.
EBA Examines Supervisory Practices, Issues Deposits Reporting Template
The European Banking Authority (EBA) published its annual report on convergence of supervisory practices for 2021. Additionally, following a request from the European Commission (EC),
US Agency Publications Address Basel, Reporting, and CECL Developments
The Farm Credit Administration published, in the Federal Register, the final rule on implementation of the Current Expected Credit Losses (CECL) methodology for allowances
SEC Extends Comment Period on Climate Risk Disclosures
The U.S. Securities and Exchange Commission (SEC) looks set to intensify focus on crypto-assets and cyber risk and extended the comment period on the proposed rules to enhance and standardize climate-related disclosures for investors.
APRA Reduces Committed Liquidity Facility, Issues Other Updates
The Australian Prudential Regulation Authority (APRA) announced reduction in the aggregate Committed Liquidity Facility and issued an update on the operational preparedness for zero and negative market interest rates.
CMF Consults on Basel Rules, Presents Roadmap to Address Climate Risks
The Commission for the Financial Market (CMF) in Chile published capital adequacy ratios (as of February 2022, January 2022, and December 2021) for 17 banks and for the banking system.
PRA Issues Statement on NPEs and Policy on Trading Activity Wind-Down
The Prudential Regulation Authority (PRA) issued a statement on the European Banking Authority (EBA) guidelines on management of non-performing exposures (NPEs) and forborne exposures.
EBA Updates Standards for 2023 Benchmarking of Internal Approaches
The European Banking Authority (EBA) updated the implementing technical standards that specify the data collection for the 2023 supervisory benchmarking exercise in relation to the internal approaches used in market risk, credit risk, and IFRS 9 accounting.
EIOPA Responds to Stakeholder Views on Blockchain in Insurance
The European Insurance and Occupational Pensions Authority (EIOPA) published a feedback statement on the responses received to the consultation on blockchain and smart contracts in insurance.