With the new Payment Services Directive ("PSD 2") of the EU, which entered into force on 13 January 2018, payment services in Europe have become the frontrunner of "open banking". Account holders can request, free of charge, that banks transmit their financial data in digital form to third parties. Furthermore, they can authorise third-party providers to initiate payments from their bank account. Personal data are owned by the data subject – this principle also forms the basis of the new General Data Protection Regulation (GDPR). Under the latter, however, there is no obligation to provide a technical solution through which customers can transmit their personal data to third-party providers in a convenient manner. In contrast to the PSD 2, the GDPR is therefore unlikely to stimulate innovation and competition in payments. In the financial sector, competition will thus be distorted. Banks must grant competitors access to customer data and their payment infrastructure, whereas internet platforms, for instance, de facto retain sovereignty over the personal data of their customers as well as access to their platforms.
[more]