Open Finance risk: Seven things that happened in July you need to know about

§ 01 Executive Snapshot

• What: July saw significant developments in Open Finance risk management, highlighting the need for continuous risk infrastructure.
• Who: Key players include Open Banking Limited, JPMorgan, the Cambridge Centre for Alternative Finance, and the Financial Conduct Authority.
• Why it matters: The evolving landscape of Open Finance necessitates robust governance, liability frameworks, and cybersecurity measures to manage increasing risks.

§ 02 Key Developments

• Open Banking Limited confirmed that the UK’s Open Banking ecosystem surpassed one billion payments and 100 billion API calls since its launch.
• JPMorgan reported that the time between a vulnerability’s disclosure and its first exploitation has reduced to about one day, with 60% of recent breaches occurring despite existing patches.
• A new report found that legal architecture alone is insufficient for liability frameworks in Open Finance, as practical implementations often diverge from regulations.

§ 03 Strategic Context

• The rapid growth in API calls and payments indicates a shift towards more complex relationships between banks and customers, necessitating improved oversight and governance.
• The Mills Review emphasizes the critical need for a liability framework in AI applications within financial services, highlighting current gaps in regulation and practice.

§ 04 Strategic Implications

• Immediate consequences include the urgent need for enhanced cybersecurity measures and governance structures to manage the growing API ecosystem.
• Long-term implications suggest that without adequate liability frameworks, the adoption of AI in financial services may face significant friction and regulatory challenges.

§ 05 Risks & Constraints

• A potential risk includes the challenge of managing vulnerabilities across third-party providers, as a single weak point can compromise the entire ecosystem.
• Competition from agile fintechs and the evolving regulatory landscape may hinder traditional institutions' ability to adapt quickly to Open Finance requirements.

§ 06 Watchlist / Forward Signals

• Upcoming developments to watch include the implementation of the AI Adoption Plan by the government and any changes to liability regulations for AI agents.
• The effectiveness of collaborative efforts to improve fraud detection and prevention in Open Banking will be critical indicators of success in the ecosystem.