BCBS published a report that monitors the evolving trend of open banking and application programming interfaces (APIs) in certain Basel Committee member jurisdictions. The report presents key trends and challenges identified in this area through the information gathered from 25 Basel Committee members from 17 jurisdictions, with focus on supervised banks and customer-permissioned data. The report also discusses the implications of these developments for banks and bank supervision. The report builds on the findings of BCBS paper on the implications of fintech developments for banks and bank supervisors.
The following are the key findings of the report with respect to the open banking frameworks:
- Traditional banking is evolving into open banking. A number of jurisdictions have adopted, or are considering adopting, open banking frameworks to require, facilitate, or allow banks to share customer-permissioned data with third parties.
- Open banking frameworks vary across jurisdictions in terms of stage of development, approach, and scope. Open banking is still in the early stages of development in a number of jurisdictions. Approximately half of the Basel Committee members have not observed significant open banking developments in their jurisdictions. There are benefits and challenges associated with each approach to open banking, when balancing bank safety and soundness, encouraging innovation, and consumer protection.
- Data privacy laws can provide a foundation for an open banking framework. Many jurisdictions that have adopted open banking frameworks also updated or plan to update their data protection and/or privacy laws.
- Multi-disciplinary features of open banking may require greater regulatory coordination. Within each jurisdiction, multiple authorities can have a role in addressing issues related to banks’ sharing of customer-permissioned data with third parties owing to the multi-disciplinary aspects of open banking.
Open banking comes with not only benefits but also various challenges for banks, such as risks to the business models and reputation and issues regarding data, cyber security, and third-party risk management. Therefore, banks and bank supervisors would need to pay more attention to the challenges that accompany the increased sharing of customer-permissioned data and growing connectivity of various entities involved in the provision of financial services. The report identifies the following key challenges for banks and supervisors:
- Challenges of adapting to the potential changes in business models
- Challenges of ensuring data and cyber-security in an open banking framework
- Time and cost to build and maintain APIs and the lack of commonly accepted API standards
- Oversight of third parties can be limited, especially in cases where banks have no contractual relationship with the third party, or where the third party has no regulatory authorization
- Assigning liability in the event of financial loss, or in the event of erroneous sharing or loss of sensitive data, which is more complex with open banking, as more parties are involved
- Increase in reputational risk, even in jurisdictions where there are established liability rules
Keywords: International, Banking, Open Banking, API, Operational Risk, Governance, Fintech, Cyber Risk, BCBS
Previous ArticleESMA Updates Q&A on European Benchmarks Regulation in December 2019
The European Banking Authority (EBA) published the final draft regulatory technical standards specifying and, where relevant, calibrating the minimum performance-related triggers for simple.
The European Central Bank (ECB) is undertaking the integrated reporting framework (IReF) project to integrate statistical requirements for banks into a standardized reporting framework that would be applicable across the euro area and adopted by authorities in other EU member states.
The European Banking Authority (EBA) has been awarded the top European Standard for its environmental performance under the European Eco-Management and Audit Scheme (EMAS).
The Monetary Authority of Singapore (MAS) set out the Financial Services Industry Transformation Map 2025 and, in collaboration with the SGX Group, launched ESGenome.
The Basel Committee on Banking Supervision met, shortly after a gathering of the Group of Central Bank Governors and Heads of Supervision (GHOS), the oversight body of BCBS.
The International Organization of Securities Commissions (IOSCO) welcomed the work of the international audit and assurance standard setters—the International Auditing and Assurance Standards Board (IAASB)
The Bank of England (BoE) published a Statistical Notice (2022/18), which informs that due to the Bank Holiday granted for Her Majesty Queen Elizabeth II’s State Funeral on Monday September 19, 2022.
The French Prudential Control and Resolution Authority (ACPR) announced that the European Banking Authority (EBA) has updated its filing rules and the implementation dates for certain modules of the EBA reporting framework 3.2.
The European Central Bank (ECB) published a paper that examines how credit rating agencies accepted by the Eurosystem, as part of the Eurosystem Credit Assessment Framework (ECAF)
The Australian Prudential Regulation Authority (APRA) announced reduction in the aggregate Committed Liquidity Facility (CLF) for authorized deposit-taking entities to ~USD 33 billion on September 01, 2022.