UK and UAE push open finance
While the CFPB pauses its rollout, the UK’s FCA set out a 2030 open‑finance roadmap that extends data portability to investment apps, and the UAE introduced a Customer Protection Regulation tightening transparency and conduct across banking, insurance and fintech. (ffnews.com) (middleeastbriefing.com) Both initiatives expand who touches consumer financial data and formalise conduct expectations in those jurisdictions.
Britain and the United Arab Emirates moved this week to widen the rules around shared financial data and customer treatment, as regulators in both markets pushed new frameworks for banks, insurers and fintechs. (fca.org.uk) (centralbank.ae) On April 14, 2026, the Financial Conduct Authority published an open-finance roadmap that runs to 2030 and shifts the project from planning to delivery. The regulator said shared data could help people and businesses access mortgages, investments, savings and pensions, not just current-account services covered by open banking. (fca.org.uk 1) (fca.org.uk 2) The Financial Conduct Authority said 2026 work will start with small-business lending and consumer mortgages, with a policy sprint in the second quarter, a taskforce process by the third quarter, a tech sprint in the fourth quarter and a discussion paper on a first scheme later in the year. From 2027, it plans to work with His Majesty’s Treasury on longer-term rules. (fca.org.uk) Open finance is the next step after open banking: a customer permits one firm to pull data from another firm, so an app or lender can see a fuller picture of accounts, savings, investments or pensions. The Financial Conduct Authority said that could support more personalized services, stronger competition and wider use of secure data-sharing across finance. (fca.org.uk 1) (fca.org.uk 2) In the United Arab Emirates, the Central Bank’s consumer-protection rulebook now sits alongside a separate Open Finance Regulation dated April 15, 2024, showing the country is building data-sharing rules and conduct rules in parallel. The rulebook says both apply across licensed financial institutions. (rulebook.centralbank.ae 1) (rulebook.centralbank.ae 2) The United Arab Emirates consumer-protection framework requires disclosure and transparency, market and business conduct controls, protection of customer data and assets, complaint management and consumer education. The Central Bank’s standards also require firms to avoid untrue or misleading statements and to document specific advice given to a consumer. (rulebook.centralbank.ae) (rulebook.centralbank.ae) The Central Bank of the United Arab Emirates says the standards are mandatory and enforceable in the same manner as the regulation. A 2023 standards document requires key facts statements, warnings about consequences of missed obligations and disclosures in Arabic and English in relevant cases. (rulebook.centralbank.ae) (rulebook.centralbank.ae) The timing stands out because the United States is still reworking its own data-portability regime. The Consumer Financial Protection Bureau finalized its personal financial data rights rule on October 22, 2024, then opened a reconsideration process on August 22, 2025 covering who can act for a consumer, fees, data security and privacy. (consumerfinance.gov) (consumerfinance.gov) That leaves the United Kingdom pressing ahead with a 2030 build-out and the United Arab Emirates tightening conduct expectations while open-finance rails are already on its books. In both markets, more firms are being invited into the customer-data chain at the same time regulators are spelling out how those firms must behave. (fca.org.uk) (rulebook.centralbank.ae)
