The Bank for International Settlements (BIS) published a paper that examines the business models and the associated risks posed by big technology firms foraying into financial services sector. The paper focuses on the new nexus between data privacy and competition, also discussing its implications for the lending segment. The paper first describes business models of these firms and analyzes the potential benefits in their provision of financial services. It then evaluates the potential costs, including the new risks of price discrimination, abuse of market power, anti-competitive behavior, and limits to data privacy. Finally, the paper lays out the complex public-policy trade-off between the objectives of efficiency and privacy and discusses the policy options.
The paper notes that business model of big tech firms rests on enabling direct interactions among a large number of users on digital platforms, such as in e-commerce, search, and social media. An essential by-product is their large stock of user data, which they use to offer a wide range of services and exploit natural network effects, generating further user activity. Increased user activity completes the circle, as it generates yet more data. Building on the self-reinforcing nature of the data-network-activities loop, some big technology firms have ventured into financial services, including payments, money management, insurance, and lending. The entry of such firms into finance promises efficiency gains and greater financial inclusion. However, it also introduces new risks associated with market power and data privacy. The nature of the new trade-off between efficiency and privacy will depend on societal preferences and will vary across jurisdictions. The paper notes that, in this context, defining and regulating the use of data has become an important policy issue for authorities and increases the need to coordinate policies at both the domestic and international levels.
At the domestic level, central banks and financial regulators may need to upgrade their understanding of personal data issues. Meanwhile, only a few countries have a national data or artificial intelligence strategy. As the digital economy expands across borders, there is a need for international cooperation on rules and standards. The paper suggests the following, potentially complementary, approaches to address the efficiency-privacy trade-off raised by the widespread use of personal data:
- One approach consists in restricting the processing of user data. For example, recent data protection laws (for example, European Union, Brazil, California, Japan, Singapore) have clarified data collection and use to protect personally identifiable information. However, the challenge with these laws is how to balance differences in privacy concerns and use of data. Some other jurisdictions have taken measures with a wider ambit that may restrict data flows across borders but such frictions in the use of data could lead to cost inefficiencies, limiting their potential benefits.
- A second approach is to give consumers greater control over their personal data. This could allow customers to grant competitive firms access to relevant information and can thus foster competition. Recent open banking initiatives (for example, in the European Union, Australia, and Mexico) are examples of concrete policy actions in this direction. These policies require financial firms to make their customers’ transaction data directly transferable to third parties or competitors, typically through open application programming interfaces (APIs). However, as access is asymmetrical, open banking rules do not fully level the playing field between big tech firms and incumbent service providers.
- A third approach is a set of public infrastructure on which a layer of services can be built. This includes important foundations for digital services such as digital identity, like Aadhaar in India and MyInfo in Singapore, and the development of data management protocols. Once these infrastructures are in place, payments, digital government services, and a host of other solutions become possible. By making consumers data-rich and giving them greater control over their data, important benefits for users can be reaped.
Keywords: International, Banking, Fintech, Financial Inclusion, Credit Risk, Bigtech, Regtech, Lending, Platformization, Open Banking, API, BIS
Previous ArticlePRA Proposes Rulebook Changes; BoE Extends BEEDS Testing Window
Next ArticleBIS to Launch Asian Green Bond Fund Early Next Year
The European Commission (EC) published a public consultation on the review of revised payment services directive (PSD2) and open finance.
The European Commission (EC) has issued two letters mandating the European Supervisory Authorities (ESAs) to jointly propose amendments to the regulatory technical standards under Sustainable Finance Disclosure Regulation or SFDR.
The European Banking Authority (EBA) published its annual report on convergence of supervisory practices for 2021. Additionally, following a request from the European Commission (EC),
The Farm Credit Administration published, in the Federal Register, the final rule on implementation of the Current Expected Credit Losses (CECL) methodology for allowances
The U.S. Securities and Exchange Commission (SEC) looks set to intensify focus on crypto-assets and cyber risk and extended the comment period on the proposed rules to enhance and standardize climate-related disclosures for investors.
The Australian Prudential Regulation Authority (APRA) announced reduction in the aggregate Committed Liquidity Facility and issued an update on the operational preparedness for zero and negative market interest rates.
The Commission for the Financial Market (CMF) in Chile published capital adequacy ratios (as of February 2022, January 2022, and December 2021) for 17 banks and for the banking system.
The Prudential Regulation Authority (PRA) issued a statement on the European Banking Authority (EBA) guidelines on management of non-performing exposures (NPEs) and forborne exposures.
The European Banking Authority (EBA) updated the implementing technical standards that specify the data collection for the 2023 supervisory benchmarking exercise in relation to the internal approaches used in market risk, credit risk, and IFRS 9 accounting.
The European Insurance and Occupational Pensions Authority (EIOPA) published a feedback statement on the responses received to the consultation on blockchain and smart contracts in insurance.