Open Banking is Coming…

From January 2018 Open Banking will enable consumers to share banking data with trusted Third Parties. The new standard will create new opportunites to measure risk and affordability for the credit industry.

What is it?

In September 2015, the Open Banking Working Group (OBWG) was set up at the request of HM Treasury. Its aim? To explore how data could be used to help people to transact, save, borrow, lend and invest their money. In February 2016, following their retail banking market investigation, the Competition Markets Authority (CMA) established the Open Banking organisation with a remit to deliver the much needed “Application Programme Interfaces (APIs), security and messaging standards”.

How it Works

Open Banking provides a set of Application Programme Interfaces (API) standards which the nine Banks mandated by the CMA (Allied Irish Bank, Bank of Ireland, Barclays, Danske, HSBC, Lloyds Banking Group, Nationwide, RBS Group, Santander) must implement. These standards make it easy for customers of those banks to securely share their data with third parties.

The process of accessing data is customer led, following OAuth 2.0 and OpenID Connect (OIDC)1 protocols:

  1. Customer is presented option to provide their data using Open Banking by Third Party (known as TPP)
  2. Customer nominates their bank/s (known as Account Servicing Payment Service Providers or ASPSPs)
  3. For each ASPSP, the Customer Authenticates and Authorises:
    1. Customer is redirected to ASPSPs login/authentication process
    2. Customer Authenticates using required method (e.g. password, 2FA or “SecureKey” device)
    3. Customer is presented Authorisation screen, listing requested scopes2
    4. After consenting, Customer returns to TPP to continue
  4. Once completed, data are available to TPP (e.g. a Lender) for analysis

  1. Open Banking Security Profile – Implementer’s Draft – v1.0.1
  2. Open Banking Account and Transaction API – Account and Transaction API Specification – v1.1.0
  1. Open Banking Working Group (OBWG) established
  2. Competition Markets Authority (CMA) publish Retail Banking Market Investigation
  3. Stage One of the CMA Remedies delivered
  4. Stage Two of the CMA Remedies delivered (Read/Write APIs)