/regulation & compliance

News and resources on regulation, compliance, legal and governance issues for banks and fintechs.

CMA writes to HSBC about open banking API breaches

Source: CMA

Letter to HSBC UK about 11 breaches of Part 2, 8 and 10 of the Retail Banking Market Investigation Order 2017.

The provisions of Part 2, 8 and 10 of the Order include a requirement for the largest Great Britain (GB) and Northern Ireland (NI) banks to ensure accurate, comprehensive and up to date product and service information is continuously available. In turn, this allows third-party app and website providers to make personalised services and information available, such as making it easier for people and businesses to find out which bank account and lending products are best for them.

HSBC UK breached Part 2 of the Order 6 times by failing to publish or publishing incorrect information through Open Banking Application Programming Interfaces (APIs). The issues identified arose as a result of information being incorrectly entered into an internal information tool. This had the consequential impact of 2 additional breaches of Part 8 and 3 additional breaches of Part 10 of the Order.

Comments: (0)