📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
The US rolled out a permissionless conversational finance surface in May 2026, but Europe’s regulatory framework requires licensing and consent, radically changing how such services are built and operated. This difference impacts market entry, competition, and consumer outcomes.
OpenAI launched its personal-finance surface in the United States on May 15, 2026, using a permissionless, API-based approach that requires no licensing or regulatory approval. In contrast, Europe’s regulatory environment mandates licensing, consent, and compliance, preventing a direct US-style rollout. This fundamental difference means that the same product cannot simply be ported across the Atlantic without significant re-architecture.
In the US, the launch of OpenAI’s personal-finance surface relied on a permissionless model: users connect their bank accounts via Plaid, and the platform aggregates data without needing licenses or explicit regulatory approval. This approach is rooted in a private, permissionless infrastructure that treats account access as a technical capability.
Europe’s environment, however, is governed by a complex framework of regulations. The revised Payment Services Directive (PSD2) and its successor PSD3 establish a mandate for licensed third-party providers to access payment accounts, requiring explicit user consent and regulatory approval. The upcoming FIDA regulation extends open banking to investments, pensions, and other financial data, creating a new licensing category—Financial Information Service Providers—expected to be operational around 2029-2030.
Additionally, the EU AI Act classifies AI systems used for credit scoring as high-risk, with strict obligations enforced by financial regulators like BaFin. These overlapping regimes mean that a conversational-finance surface in Europe must be built around licensing, consent, and AI classification, rather than permissionless API access. The architecture shifts from a product-first approach to a compliance-first framework, fundamentally altering market dynamics and entry barriers.
The mandate.
Why the US conversational-
finance surface does not
translate to Europe.
data, AI — vs zero in the US build
maximum penalty
mandate — is likely operational
bank data · it is a licensed activity
- Access built by private aggregators — Plaid, Yodlee, MX, Finicity
- No banking license required to read bank data
- Read-only design sidesteps money-transmission rules
- No single federal open-banking statute · the surface ships as a product
- Access is a licensed activity — AISP / PISP under PSD2
- Regulator authorization required; no permissionless route
- Explicit, revocable, SCA-governed consent regime
- A directly-applicable rulebook (PSR) · the surface must be licensed
The architecture diverges at the foundation: the American surface treats account access as a product you buy and consent as a button you tap, while Europe treats both as mandates you are licensed and supervised to fulfill. In the US, you ship a finance surface. In Europe, you license one.Thorsten Meyer · The Mandate · Agentic Commerce 03
Impacts of Regulatory Architecture on Market Entry
This regulatory divergence significantly influences market structure, competition, and consumer outcomes. In the US, permissionless access lowers entry barriers, favoring new entrants and innovation. In Europe, licensing and consent requirements create a moat around incumbents, favoring licensed, compliant firms and potentially slowing innovation but increasing control and security.
Understanding this difference is crucial for firms planning to operate across borders, as the regulatory architecture determines not just compliance costs but also the fundamental design of the services they can offer and the competitive landscape they face.
AI Agent + API: How to Connect Your Agent to the Internet and Services
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
European Regulatory Frameworks Shaping Data Access
The US’s permissionless model, exemplified by Plaid’s API, emerged from a private sector-driven approach to open banking, with minimal regulatory intervention. Conversely, Europe’s approach is rooted in public regulation: PSD2, PSD3, and FIDA establish a layered, mandated structure for data access, with explicit licensing, consent, and AI classification requirements.
These frameworks are evolving, with final texts of PSD3 expected in 2026 and FIDA expected around 2029-2030. The AI Act’s high-risk classification for financial AI systems further complicates deployment, requiring supervised compliance and detailed assessments.
This layered regulatory environment transforms the architecture from one of permissionless innovation to a mandated, license-based system, fundamentally changing how financial data services are built and scaled in Europe compared to the US.
“The US surface is built on a permissionless substrate, while Europe’s is a mandate-driven architecture. This difference in design fundamentally inverts how these services are constructed and operated.”
— Thorsten Meyer
![Express Schedule Free Employee Scheduling Software [PC/Mac Download]](https://m.media-amazon.com/images/I/41yvuCFIVfS._SL500_.jpg)
Express Schedule Free Employee Scheduling Software [PC/Mac Download]
Simple shift planning via an easy drag & drop interface
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unclear Outcomes of Regulatory-Driven Market Shifts
It remains uncertain how these regulatory differences will impact consumer outcomes, innovation, and market competition over time. While the European model emphasizes control and security, it may also slow the pace of innovation and market entry, but this has yet to be conclusively demonstrated.
Further developments in the implementation of FIDA, PSD3, and AI regulation will shape the actual market impact, but the long-term effects remain uncertain.
European PSD2 banking access devices
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Next Steps in Regulatory and Market Development
European regulators are expected to finalize PSD3 and FIDA regulations by 2026-2027, with operational requirements beginning around 2029-2030. Firms interested in building European-compatible surfaces will need to obtain licenses and adapt to consent and AI classification regimes.
In parallel, US firms may need to adjust their models if they seek to expand into Europe, as the permissionless approach is incompatible with the mandated architecture. Monitoring regulatory updates and market responses will be critical in the coming years.
Credit Scoring and AI: How Machine Intelligence Is Transforming Risk, Fairness, and the Future of Lending (AI & Personal Finance Book 6)
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Why can’t US permissionless finance surfaces be directly used in Europe?
Because Europe’s regulations require licensing, explicit user consent, and compliance with AI and data access rules, which are fundamentally different from the permissionless, API-based US model.
What are the main regulatory frameworks affecting data access in Europe?
PSD2, PSD3, FIDA, and the AI Act are the key regulations, creating a layered, mandated, license-based environment for financial data and AI systems.
How does the European approach impact market competition?
The licensing and consent requirements raise barriers to entry, favor incumbents and licensed firms, and may slow innovation compared to the US permissionless environment.
When will the European open-finance regulations become fully operational?
FIDA is expected to be operational around 2029-2030, with PSD3 final texts likely in 2026, shaping the future landscape of data access and AI use in finance.
Will the European regulatory approach improve consumer protection?
While it aims to enhance security and control through licensing and consent, whether it leads to better consumer outcomes remains an open question and subject to ongoing evaluation.
Source: ThorstenMeyerAI.com
