📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
The US rolled out a permissionless, API-based personal-finance surface in May 2026, while Europe’s regulatory framework requires licensed, consent-based access. This fundamental difference alters market structure, entry costs, and who can build these services.
On May 15, 2026, OpenAI launched its personal-finance surface in the United States, built on a permissionless, API-driven model that allows companies to access user financial data without prior licensing or regulation. In contrast, Europe’s regulatory environment mandates licensing and consent, making the same surface a complex licensing project rather than a simple product launch. This divergence fundamentally changes how financial data services are built and who can operate them. The unbundling of the budget app.
The US approach, exemplified by OpenAI’s launch, relies on a permissionless ecosystem where companies connect accounts through APIs like Plaid without needing prior regulatory approval. This model treats data access as a product feature, with compliance as an afterthought.
In Europe, however, the regulatory landscape is structured around strict mandates. The PSD2 framework, established in 2018, and its successor PSD3/PSR, set rules for licensed third-party providers to access bank data via regulated APIs. The upcoming FIDA regulation extends open banking to investments, pensions, and loans, creating a new license category, the Financial Information Service Provider, with operational dates expected around 2029-2030.
Additionally, the EU AI Act classifies AI systems used in credit scoring as high-risk, supervised by financial regulators like BaFin, adding another layer of regulation. These overlapping regimes mean that European firms must navigate licensing, consent dashboards, API conformity, and AI classification—an architecture that is fundamentally different from the US permissionless model.
The mandate.
Why the US conversational-
finance surface does not
translate to Europe.
data, AI — vs zero in the US build
maximum penalty
mandate — is likely operational
bank data · it is a licensed activity
- Access built by private aggregators — Plaid, Yodlee, MX, Finicity
- No banking license required to read bank data
- Read-only design sidesteps money-transmission rules
- No single federal open-banking statute · the surface ships as a product
- Access is a licensed activity — AISP / PISP under PSD2
- Regulator authorization required; no permissionless route
- Explicit, revocable, SCA-governed consent regime
- A directly-applicable rulebook (PSR) · the surface must be licensed
The architecture diverges at the foundation: the American surface treats account access as a product you buy and consent as a button you tap, while Europe treats both as mandates you are licensed and supervised to fulfill. In the US, you ship a finance surface. In Europe, you license one.Thorsten Meyer · The Mandate · Agentic Commerce 03
Impact of Regulatory Architecture on Market Dynamics
This fundamental difference in architecture means that European market entrants must obtain licenses and build consent-driven platforms, raising entry costs and favoring incumbents or licensed specialists. The US model, by contrast, allows permissionless innovation and rapid deployment but may lack the same regulatory oversight.
For consumers, this could mean slower adoption or more concentrated market power among established players in Europe. It also shifts the competitive landscape, potentially limiting new entrants but increasing data privacy and security through mandated consent and licensing regimes.
API-based personal finance data aggregator
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Divergent Regulatory Foundations in US and Europe
The US’s permissionless approach stems from a privately built open banking layer, exemplified by companies like Plaid, which operate without direct regulation. Conversely, Europe’s open banking system is rooted in public regulation, notably PSD2, which requires licensed providers and consent-based access. The upcoming FIDA regulation and the AI Act further reinforce a mandate-first architecture, contrasting sharply with the US’s permissionless substrate.
This difference reflects broader regulatory philosophies: the US prioritizes innovation and rapid deployment, while Europe emphasizes control, privacy, and consumer protection through licensing and consent regimes.
“The structural argument I want to make: the US conversational-finance surface is a product built on a permissionless substrate, and Europe does not have a permissionless substrate — it has a mandate at every layer.”
— Thorsten Meyer
European open banking compliance software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Uncertainties in European Implementation Timeline
While the US launch is confirmed, the precise operational dates for the European open-finance and AI regulations remain uncertain. FIDA is still in trilogue, with expected implementation around 2029-2030, but delays or regulatory adjustments could alter this timeline.
It is also unclear how European firms will adapt existing platforms to meet the complex licensing, consent, and AI classification requirements, and whether new entrants will emerge under this architecture.
PSD2 regulated banking API tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in European Regulatory Rollout
Regulators are expected to finalize the FIDA and AI Act texts in the coming months, with implementation phases beginning around 2029-2030. European firms are preparing to build licensed, consent-based platforms, which may reshape the competitive landscape.
Meanwhile, US firms will continue to expand permissionless services, potentially exploring European markets under the new regulatory constraints, which could influence future product design and compliance strategies.
AI credit scoring software high risk
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Why does the US launch not face the same regulatory hurdles as Europe’s?
The US approach relies on a permissionless, API-based ecosystem where companies can access data without prior licensing or regulation, unlike Europe’s mandated, license-based regime that requires compliance with PSD2, FIDA, and AI regulations.
How will the European approach affect new entrants?
The licensing and consent requirements increase entry costs and complexity, favoring established firms and licensed specialists over permissionless aggregators, potentially slowing innovation but increasing consumer protections.
When will the European open-finance and AI regulations become fully operational?
Operational dates are expected around 2029-2030, but exact timelines depend on the finalization of regulatory texts and implementation phases.
Will the European regulatory architecture lead to better consumer outcomes?
This remains an open question. The architecture emphasizes privacy and control but may result in slower innovation and less market dynamism compared to the US permissionless model.
What are the main differences between US and European financial data regulation?
The US favors permissionless innovation with minimal regulatory barriers, while Europe enforces a mandate-based, licensed approach emphasizing consent, compliance, and oversight.
Source: ThorstenMeyerAI.com