The Consumer Financial Protection Bureau (CFPB), the top US consumer finance regulator, announced long-awaited rules on Tuesday aimed at making it easier for consumers to switch between financial service providers. The new “open banking” regulations are designed to boost competition by allowing consumers to easily transfer their personal data between fintech firms and traditional banks at no cost.
The CFPB’s open banking rule governs data sharing between financial institutions and fintech companies, enabling consumers to seamlessly move their financial data between providers. The initiative is expected to empower consumers by giving them more control over their personal financial information and reducing the barriers to switching service providers.
Mixed reactions: Praise from Fintech, Criticism from banks
While fintech companies praised the new rules for promoting the secure transfer of consumer data and encouraging competition, traditional banks expressed concerns. Many in the banking sector argued that the rule poses risks to consumer data security and exceeds the legal powers granted to the CFPB.
Two major banking groups—the Bank Policy Institute and the Kentucky Bankers Association—quickly responded by filing a lawsuit in the US District Court late Tuesday. The lawsuit challenges the CFPB’s authority in implementing the open banking rule and asks the court to stop the rule from taking effect. The groups argue that the rule exposes consumers to data breaches and that the agency has overstepped its jurisdiction.
A step toward greater competition
CFPB Director Rohit Chopra compared the new open banking rule to regulations that allow mobile phone users to switch providers while keeping the same phone number, emphasizing the potential for increased competition in the financial services industry. Chopra also noted that the rules bring the US payments system closer to those in other developed countries, many of which already have more robust open banking systems.
“This new rule ensures that consumers can take their data with them to different financial service providers, giving them more freedom and better choices,” said Chopra during a speech at a financial technology event hosted by the Federal Reserve Bank of Philadelphia. He also highlighted that the rule includes strong privacy protections, restricting companies from using consumer data for purposes other than those explicitly authorized by the user.
“A company that ingests a consumer’s data can use the data to provide the product or service the consumer asked for, but not for unrelated purposes the consumer doesn’t want,” Chopra said, stressing the importance of consumer control over their data.
14 Years in the making
The open banking rule has been years in the making, with its origins dating back to the 2010 Dodd-Frank Wall Street reforms enacted after the 2008 financial crisis. First proposed over a year ago, the rules aim to modernize the financial services industry by facilitating greater competition and innovation.
Under the new rules, consumers will have more opportunities to borrow on better terms by allowing lenders to access data from other financial institutions. Additionally, consumers will be able to make payments directly from their bank accounts rather than relying on credit or debit cards. Importantly, consumers will also have the ability to immediately revoke access to their financial data if they choose.
Gradual implementation
Ahead of the announcement, CFPB officials acknowledged that they made several adjustments to the proposed rules in response to feedback from industry groups and the public. For instance, banks with less than $850 million in assets will be exempt from the data-sharing requirements, and companies will have more time to comply with the rules. Large financial technology companies will have until 2026 to adhere to the new regulations, while smaller fintech firms will have until 2030.
More Read
Support and criticism from Lawmakers and trade groups
The rule has found support in Congress. Patrick McHenry, the Republican chair of the US House Financial Services Committee, welcomed the announcement, calling it a step forward for both American innovation and consumers. “This is progress for American innovation and consumers, but we can’t stop here,” McHenry said in a statement, urging Congress to codify the rule’s protections into law.
Fintech groups, including data aggregators like Plaid and Akoya and the Financial Technology Association, which counts companies like PayPal among its members, expressed support for the rule. They believe it will enhance the security of consumer data transfers and foster competition in the financial services sector.
However, not all industry players are on board. The Consumer Bankers Association, led by Lindsey Johnson, voiced strong opposition, accusing the CFPB of distorting congressional intent to give “thousands of third parties” access to consumer data. On the other hand, the American Fintech Council criticized the rule for being too restrictive, particularly in barring the “secondary use” of consumer data for marketing and advertising purposes.
As the rule moves forward, it is expected to reshape the landscape of US financial services, potentially paving the way for more consumer-friendly innovations while continuing to spark debate over data security and regulatory oversight.
