Skip to content

Final report of advisory committee on open banking

Kevin Landry and Annelise Harnanan (summer student)

Recently, the Advisory Committee on Open Banking released the Final Report of the Advisory Committee on Open Banking, (“Report”) confirming its intention to implement a broader, more modernized open banking system in Canada and mapping out a plan to do so.

As with the recently proposed Retail Payment Activities Act (“RPAA”) discussed in our earlier client update, the Report introduces proposed new licensing requirements and an oversight regime for Financial Technology (“FinTech”) companies, however the Report pertains to governance of ‘Open Banking’ instead of payment services, and conceives of a regulatory system being put in place as early as January 2023.

Background – open banking

Open banking refers to a regulatory framework that would allow consumers and small businesses to securely transfer their financial data. With open banking, data can be efficiently and safely moved between financial institutions, such as banks, and third-party service providers, such as FinTech companies that, for example, provide budgeting or investing services.

According to the Report, Canadian consumers have already been transferring their financial data to third parties in order to access various financial management tools. However, a method used by many consumers to share their data online, called “screen scraping,” presents security and liability risks to consumers because they are required to share their banking login credentials with third-party service providers. In sharing their usernames and passwords with third parties, consumers may violate the terms of their service agreements with their banks, causing the risk of loss to shift to them without their knowledge. Open banking is seen as a way to address these risks.

Scope

If the Report’s recommendations are adopted, all federally-regulated banks would be required to participate in open banking. Provincially-regulated institutions, such as credit unions, would be able to join if so desired. Other entities, such as FinTech companies, would have to meet accreditation criteria and follow the other rules of the open banking system in order to participate.  All participants would be equally subject to data mobility requests, following consumer permission.

The Report proposes that the initial scope of the open banking system should cover data that has generally been available to consumers through online banking. This includes data from (1) chequing and savings accounts; (2) investment accounts that consumers can access through online banking; and (3) lending products such as lines of credit and credit cards. Derived data (data that has been analyzed or enhanced by financial institutions, such as internal credit risk assessments) is often proprietary and may be excluded from open banking.

It is also recommended that the initial phase of open banking be limited to “read access”, meaning consumers can grant third-party service providers the ability to receive their financial data, but not to edit this data on bank’s servers.

Governance

The Report recommends a phased approach to governance of the open banking system. For phase one, it is proposed that the government appoint an open banking lead who will be accountable to the Deputy Minister of Finance. This “lead” would work with industry experts and consumer representatives over an initial 18-month span to establish the following three foundational elements:

  1. Common rules for open banking participants that would replace the need for bilateral contracts and ensure consumer protection;
  2. An accreditation framework that allows third-party service providers to participate in the open banking system; and
  3. Technical specifications that would ensure the safe and efficient transfer of data and serve established policy objectives.

At the second phase, a “governance entity” would be established to manage the ongoing administration of the system. It is also recommended that the government consider which elements of the open banking system need to be codified in legislation.

Common rules

It is envisioned that the open banking lead will develop common rules to govern the participants of open banking, including banks and FinTech companies. The Report proposes that these rules address the allocation of liability, privacy (and consent) management, and the security of the financial data that is being transferred.

Accreditation

If the Report’s recommendations are followed, accreditation would be required for all entities to be allowed into the banking system with the exception of federally-regulated banks.  An exception for provincially-regulated financial institutions such as credit unions from accreditation is to be considered, as well.

The Report acknowledges that the accreditation criteria should be robust enough to protect consumers, but not too onerous that it excludes a wide range of market participants and notes that “holding adequate insurance or some comparable financial guarantee will be critical to ensure accountability among accredited third-party service providers”.

Technical specifications and standards

The Report recommends that technical standards be developed for sharing, accessing, safeguarding, and revoking data among system participants. Notably, the Report does not take a stance on whether a single standard, applicable to all participants ought to be developed. Rather, it states that efforts to develop technical specifications should continue, and these standards should be guided by certain principles. These principles include ensuring that the open banking system is capable of evolving with technological change and that it is compatible and interoperable with international approaches.

Conclusion

The Report contains many other recommendations and maps out a timeline for introducing open banking in Canada. It proposes that the first phase be implemented by January 2023. It remains to be seen whether or not these recommendations will be followed, especially given the upcoming federal election in 2021. Nevertheless, financial institutions and FinTech companies should be alert to the possibility that their obligations regarding consumers’ financial data could soon change.


This update is intended for general information only. If you have questions about the above, please contact the author(s) to discuss your needs for specific legal advice relating to the particular circumstances of your situation.

SHARE

Archive

Search Archive


 
 

Newfoundland and Labrador adopts virtual Alternate Witnessing of Documents Act – for good this time!

June 1, 2023

By Joe Thorne and Megan Kieley Background During the COVID-19 public health emergency order in Newfoundland and Labrador, the government passed the Temporary Alternate Witnessing of Documents Act, which (as the name implies) temporarily permitted…

Read More

The great IP debate in Canada

May 31, 2023

By Daniela Bassan, K.C. Daniela Bassan, K.C. is a Partner and Practice Group Chair at the law firm of Stewart McKelvey (Canada) where she focuses on intellectual property and complex, multi-jurisdictional dispute resolution. The premise…

Read More

New Brunswick introduces prompt payment and adjudication legislation

May 24, 2023

By Conor O’Neil and Maria Cummings On May 9, 2023, two bills were introduced in the New Brunswick Legislature that could have material affects on the construction industry. Bills 41 and 42, of the current…

Read More

10 LMIA recruitment and advertising tips for employers looking to hire foreign workers

May 24, 2023

Author Sara Espinal Henao, an Immigration Lawyer in our Halifax office, will be speaking on a related panel, Labour Market Impact Assessments Overview and Current Trends, at the upcoming CBA Immigration Law Conference in Ottawa,…

Read More

Hiring internationally in the film & television industry: 5 things you should know

May 23, 2023

Author Brendan Sheridan, an Immigration Lawyer in our Halifax Office, will be running a related webinar on May 30, 2023, Avoiding immigration bloopers: A webinar for the film & television industry, in partnership with Screen…

Read More

Whose information is it anyway? Implications of the York University decision on public and private sector privacy and confidentiality

May 19, 2023

Included in Discovery: Atlantic Education & the Law – Issue 12 By Charlotte Henderson Privacy and confidentiality requirements are some of the most important responsibilities of organizations today. An organization’s ability to properly manage information,…

Read More

Are Non-Disclosure Agreements on their way out?

May 15, 2023

Included in Discovery: Atlantic Education & the Law – Issue 12 By Hilary Newman & Jacob Zelman A non-disclosure agreement, or “NDA”, is a legal contract in which two or more persons agree to keep the…

Read More

The General Anti-Avoidance Rule: more changes coming in 2023

May 12, 2023

By Graham Haynes & Isaac McLellan  Introduction The Canadian federal budget was unveiled on Tuesday, March 28, 2023 (“Budget 2023”)1 , and proposes significant changes to the General Anti-Avoidance Rule (the “GAAR”) in Canadian tax…

Read More

When closed doors make sense: Court dismisses challenge to university board’s procedure for in camera discussions

May 11, 2023

Included in Discovery: Atlantic Education & the Law – Issue 12 By Scott Campbell, Jennifer Taylor, Folu Adesanya A long-standing dispute over governance practices at the Cape Breton University Board of Governors was recently resolved…

Read More

When Facebook goes faceless: unmasking anonymous online defamation

May 9, 2023

Included in Discovery: Atlantic Education & the Law – Issue 12 By Jon O’Kane & Emma Douglas These days it seems no one is immune from the threat of anonymous keyboard warriors posting untrue and…

Read More

Search Archive


Scroll To Top