Sunday

26th May 2019

Column / Brussels Bytes

Commission right to reject screen-scraping ban

  • The EBA claims that the technique, known as “screen-scraping,” raises privacy and security problems. (Photo: tofu_khai1980)

The European Banking Authority (EBA) recently proposed a ban on third-party financial services firms, such as those offering automated financial advice, from using software to automatically collect consumer data from banks.

Such a ban would limit innovation by enabling financial institutions to unfairly restrict their customers’ ability to share data with companies whose services often compete with those of the banks.

Read and decide

Join EUobserver today

Support quality EU news

Get instant access to all articles — and 18 year's of archives. 30 days free trial.

... or join as a group

The EBA claims that the technique, known as “screen-scraping,” raises privacy and security problems, but the European Commission has announced it intends to reject the EBA’s proposal, because the new payment services directive (PSD2) already deals adequately with these concerns.

The Commission should push ahead with its revisions, despite the EBA’s objections.

Pushing ahead

The EBA wants to ban screen-scraping in regulatory technical standards (RTS), rules that will accompany PSD2 when it comes into force in January 2018.

The EBA has legal authorisation to draft the RTS, subject to approval and amendment by the Commission.

To prevent fraud, PSD2 compels fintech companies - firms that use new technologies to offer financial services - to identify themselves to banks before accessing any data on behalf of customers, regardless of what data collection method they use.

Nevertheless, the EBA says data should only be accessible via the application programming interfaces (APIs) that banks must provide under PSD2, and not through screen-scraping, which scans what the customer sees when they log into their accounts and is harder for banks to control.

The Commission, however, rightly argues screen-scraping should still be allowed when APIs fail.

The EBA’s proposal will only work if fintech companies can be fully confident that banks’ APIs will unfailingly supply all of the data they need in order to provide services to customers.

If APIs stop working because of bugs in their code, are temporarily suspended due to new security threats, or simply fail to provide exactly the data the company needs and is otherwise available to its customers, then screen-scraping can sometimes work as a fallback.

But if screen-scraping becomes illegal, fintech companies’ ability to continue developing new data-driven services will depend on the competence and good faith of every single bank potential customers might use. That is a lot to ask, particularly when traditional banks compete with fintech companies to provide various financial services to customers.

Threat to fintech

A blanket ban would also threaten competition among banks and fintech companies, which policymakers intended to stimulate with PSD2.

PSD2 forces banks to open up their APIs to third parties, making it easier for customers to share their data and access new services. This rule is in the same spirit as the right to data portability in article 20 of the General Data Protection Regulation (GDPR), which the Council adopted six months after PSD2.

One reason why the EU came up with this rule was because so many banks have been slow to adopt open APIs, instead restricting data sharing to preferred partners - in turn limiting consumer choice and freezing out competition from fintech companies.

Yet now, the EBA wants to impose a ban on screen-scraping, which has enabled innovation in the fintech sector despite the unwillingness of the banks.

None of this is to suggest that screen-scraping is preferable to APIs. On the contrary: screen-scraping is only a failsafe.

Open APIs are a more efficient way of sharing data, as long as they reliably provide the same information customers can see when they log into their accounts.

In the future, APIs are likely to become the standard for the kinds of third-party services fintech companies provide, especially after PSD2 comes into force, and as businesses in other sectors expand their use of APIs as a way of complying with article 20 of the GDPR.

But, so far, banks’ resistance to change has forced fintech companies to rely on screen-scraping. It makes no sense to disallow this method now, when open APIs in the banking sector remain more the objective than the norm.

Instead, the RTS should allow screen-scraping when APIs fail to perform as they should.

If PSD2 succeeds in establishing reliable open APIs throughout the banking sector, then it will not be necessary to kill screen-scraping with pointless regulation: it will die a natural and peaceful death.

The Commission is on the right side of this argument. It should hold firm and push ahead with its intention to remove the proposed ban from the draft RTS.

Nick Wallace is a Brussels-based senior policy analyst at the Center for Data Innovation. His Brussels Bytes column deals with the digital single market and data-related policy issues in the European Union.

EU public lacks voice on banking laws

The complexity of financial laws and lack of NGO resources means the “man in the street” has little say on EU banking regulation, the EU Commission has warned.

Grim forecast for UK banks after Brexit

Banks will need up to $50 billion in extra capital and see higher costs of $1 billion to diversify out of the UK after Brexit, a top consultancy has said.

Some EU states face delays in 5G preparation

National governments secured a one-year extension for publishing plans to make radio frequencies available for mobile communications - but some were nevertheless unable to meet the deadline.

News in Brief

  1. Former EU climate chief cheered by 40,000 activists in Denmark
  2. UK's May announces June 7 resignation date
  3. Ireland votes for EU election and divorce referendum
  4. Report: May to announce resignation plan on Friday
  5. Leading politicians: time for EU to have female leaders
  6. Poll: Finland's Green party to surge in EU elections
  7. High demand for postal voting in Denmark
  8. Some EU citizens turned away at UK polling stations

Are EU data watchdogs staffed for GDPR?

The success of the new general data protection regulation (GDPR) will depend on whether data protection authorities enforce the new rules - which, in turn, will be at least partly determined by how many people they employ.

Eight countries to miss EU data protection deadline

The EU starts enforcing its general data protection regulation on 25 May - but Belgium, Bulgaria, Cyprus, Czech Republic, Greece, Hungary, Lithuania and Slovenia won't be ready. The delay will cause legal uncertainty.

Stakeholders' Highlights

  1. Vote for the EU Sutainable Energy AwardsCast your vote for your favourite EUSEW Award finalist. You choose the winner of 2019 Citizen’s Award.
  2. Nordic Council of MinistersEducation gets refugees into work
  3. Counter BalanceSign the petition to help reform the EU’s Bank
  4. UNICEFChild rights organisations encourage candidates for EU elections to become Child Rights Champions
  5. UNESDAUNESDA Outlines 2019-2024 Aspirations: Sustainability, Responsibility, Competitiveness
  6. Counter BalanceRecord citizens’ input to EU bank’s consultation calls on EIB to abandon fossil fuels
  7. International Partnership for Human RightsAnnual EU-Turkmenistan Human Rights Dialogue takes place in Ashgabat
  8. Nordic Council of MinistersNew campaign: spot, capture and share Traces of North
  9. Nordic Council of MinistersLeading Nordic candidates go head-to-head in EU election debate
  10. Nordic Council of MinistersNew Secretary General: Nordic co-operation must benefit everybody
  11. Platform for Peace and JusticeMEP Kati Piri: “Our red line on Turkey has been crossed”
  12. UNICEF2018 deadliest year yet for children in Syria as war enters 9th year

Latest News

  1. Turnout up in Slovakia, with pro-EU liberals scoring high
  2. Belgium votes in hybrid EU-national election
  3. Irish greens take Dublin in second EU exit poll
  4. EU election results to trigger top jobs scramble This WEEK
  5. Don't tell the Dutch - but Timmermans 'won'
  6. EU says goodbye to May with 'respect'
  7. Strache scandal: how big a hit will Austrian far-right take?
  8. Italy train row exposes competing views of EU

Stakeholders' Highlights

  1. Nordic Council of MinistersNordic commitment to driving global gender equality
  2. International Partnership for Human RightsMeet your defender: Rasul Jafarov leading human rights defender from Azerbaijan
  3. UNICEFUNICEF Hosts MEPs in Jordan Ahead of Brussels Conference on the Future of Syria
  4. Nordic Council of MinistersNordic talks on parental leave at the UN
  5. International Partnership for Human RightsTrial of Chechen prisoner of conscience and human rights activist Oyub Titiev continues.
  6. Nordic Council of MinistersNordic food policy inspires India to be a sustainable superpower
  7. Nordic Council of MinistersMilestone for Nordic-Baltic e-ID
  8. Counter BalanceEU bank urged to free itself from fossil fuels and take climate leadership
  9. Intercultural Dialogue PlatformRoundtable: Muslim Heresy and the Politics of Human Rights, Dr. Matthew J. Nelson
  10. Platform for Peace and JusticeTurkey suffering from the lack of the rule of law
  11. UNESDASoft Drinks Europe welcomes Tim Brett as its new president
  12. Nordic Council of MinistersNordic ministers take the lead in combatting climate change

Join EUobserver

Support quality EU news

Join us