📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
The US rolled out its personal-finance surface permissionlessly, but Europe’s regulatory framework requires licensing and consent, preventing a direct translation. This creates different market structures and winners.
OpenAI launched its personal-finance surface in the United States on May 15, 2026, using a permissionless approach that allowed access through API keys without regulatory approval. In contrast, Europe’s regulatory environment treats access to financial data as a licensed, consent-driven activity, making a direct US-style launch impossible.
In the US, the launch was permissionless: companies could connect accounts via Plaid, across thousands of institutions, without needing licenses or regulatory approval. This allowed rapid deployment and a product-focused approach where compliance was secondary.
Europe’s open-banking regime, established by PSD2 in 2018 and evolving through PSD3 and the FIDA regulation, mandates licensing for third-party providers accessing bank data. The process involves obtaining licenses, adhering to strict API standards, and ensuring user consent. The upcoming AI Act further classifies AI systems used in credit scoring as high-risk, imposing additional obligations supervised by financial regulators like BaFin.
This regulatory architecture means that a European equivalent of the US surface is a licensed, consent-managed product, not a permissionless API. Firms must navigate a complex compliance landscape, which favors incumbents with existing licenses over permissionless aggregators.
The mandate.
Why the US conversational-
finance surface does not
translate to Europe.
data, AI — vs zero in the US build
maximum penalty
mandate — is likely operational
bank data · it is a licensed activity
- Access built by private aggregators — Plaid, Yodlee, MX, Finicity
- No banking license required to read bank data
- Read-only design sidesteps money-transmission rules
- No single federal open-banking statute · the surface ships as a product
- Access is a licensed activity — AISP / PISP under PSD2
- Regulator authorization required; no permissionless route
- Explicit, revocable, SCA-governed consent regime
- A directly-applicable rulebook (PSR) · the surface must be licensed
The architecture diverges at the foundation: the American surface treats account access as a product you buy and consent as a button you tap, while Europe treats both as mandates you are licensed and supervised to fulfill. In the US, you ship a finance surface. In Europe, you license one.Thorsten Meyer · The Mandate · Agentic Commerce 03
Implications of Regulatory Architecture on Market Entry
The European approach, driven by mandates and licensing, fundamentally alters who can build and operate personal-finance surfaces. It raises barriers to entry, favors licensed firms, and shifts the product from a permissionless aggregation to a consent-driven, licensed service. This may lead to slower innovation, increased concentration, and different consumer outcomes compared to the US. Understanding this architectural divide is crucial for firms, regulators, and consumers as the market evolves.
AI Agent + API: How to Connect Your Agent to the Internet and Services
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Regulatory Foundations of US and European Financial Data Access
The US’s permissionless model was built on private sector innovations like Plaid, which created an API layer that allowed any company to connect to financial institutions without regulatory constraints. This enabled rapid product deployment and a highly competitive landscape.
In Europe, the regulatory approach is rooted in PSD2, which mandated licensed access to bank data, creating a layered, consent-based architecture. The transition to PSD3 and FIDA expands this framework to include investments, pensions, and loans, with a focus on licensing and AI classification. These regulations aim to protect consumers and ensure data security but also create structural barriers for new entrants.
The AI Act, effective August 2026, classifies financial AI systems as high-risk, requiring compliance and supervision, adding further complexity to the European landscape.
“The US surface is permissionless, built on private APIs, while Europe’s is a licensed, consent-driven architecture. The difference in architecture is fundamental.”
— Thorsten Meyer
European open banking API compliance software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Questions About Market Impact
It remains unclear whether the European licensing and consent approach will lead to better consumer protection or simply slower innovation and higher costs. The long-term effects on market competition and consumer choice are still being studied.
Additionally, the exact timeline for full implementation of FIDA and the AI Act’s impact on financial AI systems remains uncertain, as regulatory processes continue to unfold.
consent management platform for banking
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in Regulatory and Market Development
Regulators in Europe are expected to finalize the FIDA and PSD3 regulations in 2026, with operational implementation around 2029-2030. Firms are preparing to adapt their architectures to comply with licensing and AI classification requirements.
In parallel, US firms will continue to expand permissionless services, but may face regulatory scrutiny if they attempt to enter European markets. Cross-Atlantic cooperation or divergence will shape future innovation and competition.
Financial Management Core Concepts
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Why can’t US-style permissionless finance surfaces be launched in Europe?
Because European regulations treat access to financial data as a licensed, consent-based activity, requiring firms to obtain licenses and adhere to strict API standards, unlike the permissionless approach in the US.
What is the role of the AI Act in European financial services?
The AI Act classifies certain financial AI systems as high-risk, imposing compliance, testing, and supervision requirements that influence how AI can be used in credit scoring and related areas.
Will European firms be able to compete with US permissionless aggregators?
Yes, but they will do so through licensed, consent-driven products built within the regulatory framework, which may favor incumbents and licensed specialists over permissionless entrants.
How does this regulatory architecture affect consumer experience?
Consumers in Europe will encounter consent dashboards and licensing procedures, which may slow access but aim to enhance security and control over their data.
Source: ThorstenMeyerAI.com
