Playing Safety Catch-Up
As we outlined in our last post about the practice of screen scraping, in order to protect user’s data, it’s extremely important that financial institutions start moving towards APIs. With the PSD2 initiative, officially the Revised Payment Security Directive, Europe is ahead of US in terms of best financial institution security and consumer privacy practices. And if the recent Facebook/Cambridge Analytica scandal is any indication, it’s more likely that the US will see a data protection movement similar to what we’re seeing in Europe.
The question isn’t if PSD2 will be adapted in the US, but rather when? Before we try to answer this question let’s take a closer look at what PSD2 actually includes.
What is PSD2?
At its core, PSD2 or Open Banking is about protecting consumers. It enables bank customers to use third-party providers to manage their finances. Banks are obligated to provide third-party providers access to their customers’ accounts through open APIs enabling them to build financial services on top of banks’ data and infrastructure. This places an emphasis on consent via security, innovation, and market competition.
- AISP’s provide users with aggregated information about their payment accounts in a single location, such as transaction history, account balances, direct debits etc.
- PISP’s facilitate the use of payments via online banking with regards to online fund transfers, direct debits, credit cards transactions, etc. This is a game-changer when it comes to avoiding credit card fees and other transaction costs.
By enabling fintechs, large technology firms, other banks, and even certain retail organizations to go head-to-head with banks as PSPs, PSD2 aims to provide lower costs and higher security for consumers and to afford merchants greater flexibility to differentiate customer experiences, including payments.
APIs give the financial institutions the ability to manage security and control compliance risks while at the same time giving users access, control and visibility into how their data is being used—a win/win.
Control Begets Innovation
Giving consumers control of their data and who has access to it opens the door for new innovation and new partnerships where security and compliance are givens. PSD2 creates opportunities for banks to compete as technology innovators, wielding powerful analytical tools to extract valuable insights from their vast stores of proprietary data. And market dynamics and customer attitudes may favor banks that can capture opportunities quickly and effectively. In fact, 35% of banker’s surveyed said in the payments arena, FinTechs were the most likely to benefit from the implementation of PSD2.
There are countless other services FinTech companies could provide if they had access to customer transaction information. Currently, most banks cooperate with data requests, but they can be slow to respond or sometimes block them entirely. PSD2 will make it compulsory to both share the data and build systems capable of making this trade real-time. A massive win for consumers and businesses.
So When Will PSD2 Come to the US?
There’s no timeline right now, but there are several factors that could compel this directive to happen in the US sooner than later: requirement of screen scraping companies, FinTechs and FIs to release known data breaches; a regulatory push; another Equifax breach; a consumer-driven movement; or even FIs finally having good personal finance management capabilities.
Smart companies will start preparing so the minute we have our own Open Banking, they’re ready. Or better yet, start acting like PSD2 is already here. That means:
- Building and opening up APIs to allow your customers to have control
- Thinking about how you can innovate once restrictions are lifted
- Understanding the control APIs provide for consumers and why this is a benefit
- Learning how Open Banking can save you and your customers both time and money
Creating more transparency and providing consumers with more control over who can access their data is a great thing for investors and an even better opportunity for innovation. How will you capitalize?
1 McKinsey Global Payments Practice PSD2 Survey 2017