📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.
TL;DR
The US introduced a permissionless conversational-finance surface in May 2026, but Europe’s strict licensing and consent regimes mean the same approach cannot be directly transferred. This creates fundamental architectural differences that influence market dynamics and firm eligibility.
OpenAI launched its personal-finance surface in the US on May 15, 2026, using a permissionless approach that allows direct account aggregation without regulatory licensing. In contrast, Europe’s regulatory environment mandates licensing, consent, and compliance under a complex framework that makes a similar product fundamentally different and more regulated.
In the US, the launch was permissionless: firms could connect accounts via APIs like Plaid without needing licenses or regulatory approval. This model relies on a private, permissionless infrastructure that treats data access as a technical capability rather than a regulated activity.
European regulation, however, treats account access as a licensed, consent-based activity. Under PSD2, and now the forthcoming PSD3 and FIDA, access to banking, investment, and loan data is governed by licenses granted to third-party providers, with strict compliance, consent, and AI classification regimes. The European AI Act further classifies systems used for credit scoring as high-risk, increasing regulatory oversight.
This structural difference means that the same US product, when brought into Europe, must be re-architected around licensing, consent dashboards, conformity assessments, and AI classification. Firms that succeed in Europe are likely to be licensed specialists, unlike the permissionless aggregators dominant in the US.
The mandate.
Why the US conversational-
finance surface does not
translate to Europe.
data, AI — vs zero in the US build
maximum penalty
mandate — is likely operational
bank data · it is a licensed activity
- Access built by private aggregators — Plaid, Yodlee, MX, Finicity
- No banking license required to read bank data
- Read-only design sidesteps money-transmission rules
- No single federal open-banking statute · the surface ships as a product
- Access is a licensed activity — AISP / PISP under PSD2
- Regulator authorization required; no permissionless route
- Explicit, revocable, SCA-governed consent regime
- A directly-applicable rulebook (PSR) · the surface must be licensed
The architecture diverges at the foundation: the American surface treats account access as a product you buy and consent as a button you tap, while Europe treats both as mandates you are licensed and supervised to fulfill. In the US, you ship a finance surface. In Europe, you license one.Thorsten Meyer · The Mandate · Agentic Commerce 03
Regulatory Architecture Shapes Market Entry and Competition
The fundamental difference in regulatory architecture means that European firms must build licensed, consent-driven products, which raises entry costs and favors incumbents and specialized providers. This may lead to slower innovation and market concentration, contrasting with the US’s permissionless, rapid deployment model. The approach affects consumer access, competition, and data privacy outcomes, making the European market structurally distinct and more regulated, but potentially more secure and privacy-focused.account aggregation API tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Legal and Technological Foundations of US and European Financial Data Access
The US’s permissionless approach relies on private infrastructure like Plaid, which allows firms to access banking data without explicit regulatory licenses, fostering rapid innovation and a diverse ecosystem.
Europe’s approach is rooted in PSD2, enforced since 2018, with ongoing developments under PSD3 and FIDA, which impose licensing, consent, and conformity requirements. The European AI Act, enacted in 2026, further tightens oversight on AI systems used for financial assessment, emphasizing a different regulatory philosophy focused on control and compliance rather than permissionless innovation.
This divergence reflects a broader philosophical divide: the US favors a market-driven, permissionless innovation model, while Europe emphasizes regulatory control, data privacy, and consumer protection through licensing and consent regimes.
“The American permissionless surface is built on a private, unregulated infrastructure, while Europe’s equivalent must be a licensed, consent-driven product, fundamentally changing its architecture.”
— Thorsten Meyer
HAUTOCO Accounting Ledger Book A5 Horizontal Ledger Books for Small Business Bookkeeping Expense Tracker Notebook for Home Budget Tracking Personal Finance Log Journal 8.3 x 6.2'', Dark Purple
Easy To Track Your Finances: HAUTOCO accounting ledger book keeps you on top of your expenses and income!…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Unclear Impact on Consumer Outcomes and Market Competition
It remains uncertain whether Europe’s licensing and consent-driven approach will lead to better consumer privacy and security outcomes compared to the US’s permissionless model. The effects on innovation speed, market competition, and data privacy are still unfolding, and future regulatory adjustments may further influence these dynamics.
Compliance and Regulatory Affairs Manager Case for iPhone 16 Pro
A great birthday, Christmas, or promotion gift idea for a compliance and regulatory affairs manager who ensures the…
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Regulatory Milestones and Market Shifts Expected by 2030
European regulators are expected to finalize PSD3 and FIDA regulations by 2026-2027, establishing licensing and consent frameworks. Firms will need to adapt their architectures accordingly, with licensed providers dominating the landscape. The ongoing AI classification regime will also influence product development and deployment, potentially shaping the competitive environment for years to come.
European banking license software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
Why can’t the US permissionless finance surface be simply implemented in Europe?
Because European law treats account access as a regulated, licensed activity that requires consent and compliance, unlike the US where it is a permissionless, private infrastructure-based product.
How does the European AI Act impact financial AI systems?
The AI Act classifies systems used for credit scoring and assessment as high-risk, imposing strict obligations and supervision by financial regulators, which affects how AI is integrated into financial services in Europe.
Will the European approach slow down innovation compared to the US?
It is possible. The licensing and compliance regime raises barriers to entry and emphasizes security and privacy, which may slow innovation but potentially improve consumer protection.
Who is best positioned to build the European version of the US finance surface?
Licensed, consent-native firms with regulatory approval are better positioned, as the architecture favors incumbents and specialized providers over permissionless aggregators.
Source: ThorstenMeyerAI.com
