Signal Scanner · FINANCIAL SERVICES & FUTURE OF MONEY · 27 July 2026

The End of Free Bank Data: America Reprices Open Banking

Beneath the settled open-banking narrative, the United States is converting free access to customer bank data into a priced, negotiated market: a CFPB rewrite, a New York fee ban and bilateral bank-aggregator contracts will decide fintech and pay-by-bank economics by 2028.

The consensus reads open banking as a solved question: American consumers won the right to share their bank data when the CFPB finalised its Section 1033 rule in October 2024, and the remaining work is implementation. The quieter development is that the rule's foundation, free access, is being unpicked from three directions. The CFPB's rewrite is expected to legalise data fees, the largest US bank already charges aggregators under private contract, and New York has drafted the first state law to push back. The live question for the next two years is who sets the price of customer data. That answer lands between now and 2028.

Signal Identification

This is a regulatory pivot with the market moving ahead of the rule. A right created as free-by-regulation in 2024 is being converted into a negotiated commercial input, while a counter-movement in state legislatures attempts to re-establish the fee ban state by state. The signal is the repricing itself, not the litigation noise around it.

Time horizon: 2-4 years (proposed rule and litigation resolution 2026-2027; repriced aggregation economics and state patchwork 2027-2029) Plausibility band: Medium–High Geographic / Jurisdictional Scope: United States primary (federal rulemaking; New York first mover, other states as spillover); EU and UK as contrast jurisdictions where mandated access remains free of per-request bank fees Sectors exposed: retail banking; fintech and data aggregation; payments, including pay-by-bank; consumer lending and cash-flow underwriting; wealth platforms; credit bureaus

What's Changing

The federal rewrite now has a date. The CFPB's delayed Unified Agenda commits the Bureau to proposed rules on Section 1033 personal financial data rights "by the end of July this year" (ABA Banking Journal, 07/07/2026). Reporting indicates the proposal would eliminate the total ban on data-provider fees and instead permit charges after a set number of free requests (Ballard Spahr LLP, 29/06/2026). The 2024 rule remains enjoined, its requirements "in flux" for banks, fintechs and aggregators (Venable LLP, 17/07/2026).

The market moved first. JPMorgan received 1.89 billion aggregator data requests in June 2025, only about 13% tied to a customer-initiated action, and by September 2025 had a paid-access deal with Plaid after a circulated estimate put Plaid's exposure near $300 million a year (OpenBankingTracker.com, 08/06/2026). Usage remains far behind intent: 46% of US consumers say they would use open-banking payments, while 11% report having done so (PYMNTS, 07/07/2026).

The countermove is legislative. New York's Financial Data Rights Act, introduced 17 March 2026, would ban any charge for covered data outright (New York State Senate, 17/03/2026), backed by penalties of up to $10,000 per violation, in the first state law aimed specifically at financial data access (Davis Wright Tremaine, 04/05/2026). In Congress, the GUARD Financial Data Act would pre-empt state regimes and stop banks blocking disclosed screen scraping (Cato Institute, 26/05/2026).

From free-by-rule to priced-by-contract: the milestones

Oct 2024 CFPB rule bans data fees Aug 2025 ANPR reopens the fee question Sep 2025 JPMorgan and Plaid sign paid-access deal Mar 2026 New York fee-ban bills introduced Jul 2026 Proposed rule due: fee tiers expected

Source basis: ABA Banking Journal (07/07/2026); Ballard Spahr LLP (29/06/2026); OpenBankingTracker.com (08/06/2026); New York State Senate (17/03/2026).

Disruption Pathway

Stage one runs through 2027: the proposed rule publishes, the fee tiers take statutory shape, and the litigation that froze the 2024 rule resolves against the rewritten text. Bilateral pricing spreads meanwhile from JPMorgan across the large deposit franchises, because once one bank prices bulk access, free provision elsewhere becomes a subsidy to competitors. Stage two, 2027 to 2029, is the repricing of the aggregation layer itself: fintechs ration API calls, background polling gets engineered out, and banks build the premium data tier PYMNTS describes above commodity account verification. If Albany passes its bill, fee legality then varies by state until preemption litigation decides the map.

Stresses concentrate at three points: payments-adjacent fintechs whose pay-by-bank margins were built on free data; credit-building and budgeting apps serving low-income users at zero subscription price; and the aggregators, whose costs rise on one side while their fintech clients resist pass-through on the other. Two adaptations follow: operationally, high-frequency polling gives way to metered, purpose-limited API calls; in compliance functions, national institutions stand up state-by-state data-access tracking.

Why This Matters Now

Boards of banks, fintechs and payments firms each face a decision this cycle, and the window to shape it closes when the proposed rule publishes. Banks should decide whether data access becomes a revenue line or stays a cost-recovery utility, since 2026 contract terms will outlast the rule that follows. Fintech boards and their investors should reprice unit economics that assumed free data, and decide whether to lock multi-year aggregator terms before fee tiers become law. Payments strategists should test whether pay-by-bank still undercuts cards once per-pull charges enter the stack. Treasurers and lenders using cash-flow underwriting should map which inputs stay free and which will carry usage pricing.

Decision-action posture for this signal: Prepare: the fee architecture becomes concrete when the CFPB publishes its proposed rule, the named trigger for committing capital or contracts; position ahead of it rather than after it.

Counter-Argument

The strongest objection is that the repricing is marginal, not material. Ballard Spahr notes that fees are a small component of the wider data-sharing obligations, most of which are expected to survive the rewrite, and the contracted JPMorgan-Plaid pricing was described as fractions of a cent per data pull, with Plaid saying it would not pass costs to clients (OpenBankingTracker.com, 08/06/2026). New York's bills sit in committee, and any state fee ban invites a preemption challenge before it binds a national bank.

The counter-counter: at 1.89 billion monthly requests, even sub-cent pricing redirects hundreds of millions of dollars a year and, more to the point, changes behaviour, because banks now meter what was unmetered. The direction is being set by contracts that exist today regardless of how the rule, or Albany, lands.

Implications

On the available evidence, this is durable change: once data access carries a price, an interchange-style economics takes hold, with scale players negotiating rates and small users paying rack prices. Winners are large banks holding the customer record and efficient aggregators that can amortise fees across thousands of clients; losers are business models built on continuous free polling. The contrast abroad sharpens the point: in Europe, mandated access under PSD2 remains free of per-request bank fees (OpenBankingTracker.com, 08/06/2026), so the US is deciding alone whether financial data becomes a priced national input. The inflection window is 2026 to 2028.

Early Indicators to Monitor

Disconfirming Signals

Strategic Questions

Keywords

Open banking; Section 1033; CFPB; personal financial data rights; data access fees; data aggregators; Plaid; JPMorgan Chase; New York Financial Data Rights Act; pay-by-bank; screen scraping; GUARD Financial Data Act

Bibliography

Source tiers: Tier 1, governments, regulators and intergovernmental bodies. Tier 2, think-tanks, academic institutes, major consultancies and quality data providers. Tier 3, quality journalism and specialist trade press. Tier 4, vendor, company and practitioner sources, used only as directional corroboration.


Prepared by Shaping Tomorrow: 27 July 2026