📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
The US launched its conversational-finance surface without regulatory constraints, while Europe’s strict licensing and compliance regimes fundamentally alter its architecture. This difference impacts market entrants, competition, and consumer outcomes.
OpenAI’s personal-finance surface launched in the US on May 15, 2026, without requiring licenses or regulatory approval, contrasting sharply with Europe’s complex, mandate-driven regime that treats data access as a licensed activity.
In the United States, the launch relied on a permissionless model—connect accounts via Plaid, with no regulator involved—permitting rapid deployment and innovation. In Europe, however, the same type of data access is governed by a layered, regulation-heavy framework. The PSD2 directive made account access a regulated activity in 2018, and its successor, PSD3 and the Payment Services Regulation (PSR), are still under finalization, expected to be fully implemented by 2027. Additionally, the new open-finance regime, FIDA, extends open banking to investments, pensions, and loans, creating a new licensing category for data providers, with operational dates around 2029-2030.
Further complicating the landscape is the EU AI Act, which classifies AI systems used for credit scoring as high-risk, with obligations beginning August 2026. These regulations impose compliance, licensing, and AI classification requirements that shape the architecture of any European financial data service, making it a licensing and consent architecture rather than a permissionless product.
The mandate.
Why the US conversational-
finance surface does not
translate to Europe.
data, AI — vs zero in the US build
maximum penalty
mandate — is likely operational
bank data · it is a licensed activity
- Access built by private aggregators — Plaid, Yodlee, MX, Finicity
- No banking license required to read bank data
- Read-only design sidesteps money-transmission rules
- No single federal open-banking statute · the surface ships as a product
- Access is a licensed activity — AISP / PISP under PSD2
- Regulator authorization required; no permissionless route
- Explicit, revocable, SCA-governed consent regime
- A directly-applicable rulebook (PSR) · the surface must be licensed
The architecture diverges at the foundation: the American surface treats account access as a product you buy and consent as a button you tap, while Europe treats both as mandates you are licensed and supervised to fulfill. In the US, you ship a finance surface. In Europe, you license one.Thorsten Meyer · The Mandate · Agentic Commerce 03
Implications for Market Entry and Competition in Europe
This regulatory architecture fundamentally alters how financial data services are built and who can participate. Unlike the US, where permissionless access allowed rapid innovation and entry by aggregators like Plaid, Europe’s mandated licensing and consent regimes favor established, licensed firms. This creates a moat, increasing costs and complexity for new entrants, potentially leading to a more concentrated market. Whether this results in better consumer protection or slower innovation remains an open question.
European open banking API development kit
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Financial Data Regulation Frameworks Explained
The US’s open banking was built on a private, permissionless layer—Plaid and similar firms facilitated access without direct regulation. Europe’s approach is rooted in public regulation: PSD2, PSD3, and FIDA establish a layered, license-based regime that requires firms to obtain explicit consent and licenses to access and process financial data. The AI Act further imposes high-risk classifications on certain AI applications in finance, requiring compliance and supervision by financial authorities like BaFin in Germany. These overlapping regimes create a fundamentally different architecture for financial data services.
“The American model relies on permissionless access built privately, while Europe’s model is a mandated, licensed architecture that fundamentally changes how services are built and who can participate.”
— Thorsten Meyer
PSD2 compliant financial data access device
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unresolved Questions About Market Impact and Innovation
It remains unclear whether Europe’s mandated, license-based architecture will lead to slower innovation, higher consumer protection, or increased market concentration. The long-term effects of these regulatory differences on competition and consumer outcomes are still being evaluated.
AI credit scoring software for high-risk applications
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Upcoming Regulatory Milestones and Market Developments
Implementation of PSD3 and FIDA regulations around 2027-2030 will clarify how open finance evolves under the mandated regime. Additionally, the impact of the AI Act on financial AI systems will become clearer as obligations begin in August 2026. Market entrants and incumbents will adapt their strategies accordingly, and further analysis will assess whether the architecture favors innovation or stability.
financial data licensing platform Europe
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Why can’t the US model be directly applied in Europe?
Because Europe’s legal framework mandates licensing, consent, and compliance at every layer, unlike the permissionless, private-layer approach used in the US. This fundamentally changes how services are built and who can operate them.
What are the main regulatory frameworks affecting European financial data access?
PSD2, PSD3, the Payment Services Regulation (PSR), FIDA, and the AI Act are the key regulations shaping the European open finance and AI environment, all requiring licensing, consent, and compliance measures.
How does this difference affect new entrants in Europe?
Entering the European market requires obtaining licenses, complying with consent and AI regulations, and navigating a complex regulatory environment, which raises entry costs and favors established, licensed firms over permissionless aggregators.
Will Europe’s approach lead to better consumer protection?
This remains uncertain. The mandated, license-based architecture aims to improve security and consent management, but whether it results in better consumer outcomes compared to the US permissionless model is still under evaluation.
Source: ThorstenMeyerAI.com