Open Banking rules go into effect in UK, making it mandatory for banks to share account info with third parties like fintech startups upon customer request
Context & Ripple Effects
With Open Banking now law, UK banks lose their gatekeeper position over customer account data: any licensed third party can request access with the customer's consent. The rule lands on a market already being reshaped by regulation — app-only banks across the UK and Europe have been scaling on favorable rules and venture capital, and they are the most immediate beneficiaries of mandated data sharing.
The longer arc matters too: within eighteen months, Plaid brought its account-linking services to Britain, connecting to eight of the country's biggest banks, showing how quickly an aggregation layer forms on top of a mandated-access regime.
First-order effects
- Major UK banks must now build and maintain compliant interfaces that hand account information to approved third parties on request, converting a proprietary asset into a regulated utility.
- Fintech startups and app-only banks gain direct, legal access to bank-held account data without needing bilateral deals with each incumbent.
Second-order effects
- A new intermediary layer emerges between banks and apps — Plaid's entry to eight of Britain's biggest banks shows aggregators capturing the integration work banks would otherwise control.
- Incumbent banks face margin pressure on payment and account services as startups build competing experiences on top of the same underlying accounts.
Third-order effects
- Mandated data sharing becomes reusable public infrastructure: by 2025 the same banks are committed to live data sharing in a fraud clampdown alongside Amazon, Google, Meta, and BT, repurposing the plumbing built for competition.
- The competitive promise stays unfinished — seven years on, UK fintechs still struggle to make open banking-powered payments a viable alternative to card payments, suggesting mandated access lowers barriers but does not by itself shift consumer payment habits.
The trend: Regulators are turning customer-permissioned data access into permanent financial infrastructure whose uses keep expanding beyond competition — from fintech payments to sector-wide fraud intelligence.