The End of Free Bank Data: America Reprices Open Banking
Beneath the settled open-banking narrative, the United States is converting free access to customer bank data into a priced, negotiated market: a CFPB rewrite, a New York fee ban and bilateral bank-aggregator contracts will decide fintech and pay-by-bank economics by 2028.
The consensus reads open banking as a solved question: American consumers won the right to share their bank data when the CFPB finalised its Section 1033 rule in October 2024, and the remaining work is implementation. The quieter development is that the rule's foundation, free access, is being unpicked from three directions. The CFPB's rewrite is expected to legalise data fees, the largest US bank already charges aggregators under private contract, and New York has drafted the first state law to push back. The live question for the next two years is who sets the price of customer data. That answer lands between now and 2028.
Signal Identification
This is a regulatory pivot with the market moving ahead of the rule. A right created as free-by-regulation in 2024 is being converted into a negotiated commercial input, while a counter-movement in state legislatures attempts to re-establish the fee ban state by state. The signal is the repricing itself, not the litigation noise around it.
What's Changing
The federal rewrite now has a date. The CFPB's delayed Unified Agenda commits the Bureau to proposed rules on Section 1033 personal financial data rights "by the end of July this year" (ABA Banking Journal, 07/07/2026). Reporting indicates the proposal would eliminate the total ban on data-provider fees and instead permit charges after a set number of free requests (Ballard Spahr LLP, 29/06/2026). The 2024 rule remains enjoined, its requirements "in flux" for banks, fintechs and aggregators (Venable LLP, 17/07/2026).
The market moved first. JPMorgan received 1.89 billion aggregator data requests in June 2025, only about 13% tied to a customer-initiated action, and by September 2025 had a paid-access deal with Plaid after a circulated estimate put Plaid's exposure near $300 million a year (OpenBankingTracker.com, 08/06/2026). Usage remains far behind intent: 46% of US consumers say they would use open-banking payments, while 11% report having done so (PYMNTS, 07/07/2026).
The countermove is legislative. New York's Financial Data Rights Act, introduced 17 March 2026, would ban any charge for covered data outright (New York State Senate, 17/03/2026), backed by penalties of up to $10,000 per violation, in the first state law aimed specifically at financial data access (Davis Wright Tremaine, 04/05/2026). In Congress, the GUARD Financial Data Act would pre-empt state regimes and stop banks blocking disclosed screen scraping (Cato Institute, 26/05/2026).
From free-by-rule to priced-by-contract: the milestones
Source basis: ABA Banking Journal (07/07/2026); Ballard Spahr LLP (29/06/2026); OpenBankingTracker.com (08/06/2026); New York State Senate (17/03/2026).
Disruption Pathway
Stage one runs through 2027: the proposed rule publishes, the fee tiers take statutory shape, and the litigation that froze the 2024 rule resolves against the rewritten text. Bilateral pricing spreads meanwhile from JPMorgan across the large deposit franchises, because once one bank prices bulk access, free provision elsewhere becomes a subsidy to competitors. Stage two, 2027 to 2029, is the repricing of the aggregation layer itself: fintechs ration API calls, background polling gets engineered out, and banks build the premium data tier PYMNTS describes above commodity account verification. If Albany passes its bill, fee legality then varies by state until preemption litigation decides the map.
Stresses concentrate at three points: payments-adjacent fintechs whose pay-by-bank margins were built on free data; credit-building and budgeting apps serving low-income users at zero subscription price; and the aggregators, whose costs rise on one side while their fintech clients resist pass-through on the other. Two adaptations follow: operationally, high-frequency polling gives way to metered, purpose-limited API calls; in compliance functions, national institutions stand up state-by-state data-access tracking.
Why This Matters Now
Boards of banks, fintechs and payments firms each face a decision this cycle, and the window to shape it closes when the proposed rule publishes. Banks should decide whether data access becomes a revenue line or stays a cost-recovery utility, since 2026 contract terms will outlast the rule that follows. Fintech boards and their investors should reprice unit economics that assumed free data, and decide whether to lock multi-year aggregator terms before fee tiers become law. Payments strategists should test whether pay-by-bank still undercuts cards once per-pull charges enter the stack. Treasurers and lenders using cash-flow underwriting should map which inputs stay free and which will carry usage pricing.
Decision-action posture for this signal: Prepare: the fee architecture becomes concrete when the CFPB publishes its proposed rule, the named trigger for committing capital or contracts; position ahead of it rather than after it.
Counter-Argument
The strongest objection is that the repricing is marginal, not material. Ballard Spahr notes that fees are a small component of the wider data-sharing obligations, most of which are expected to survive the rewrite, and the contracted JPMorgan-Plaid pricing was described as fractions of a cent per data pull, with Plaid saying it would not pass costs to clients (OpenBankingTracker.com, 08/06/2026). New York's bills sit in committee, and any state fee ban invites a preemption challenge before it binds a national bank.
The counter-counter: at 1.89 billion monthly requests, even sub-cent pricing redirects hundreds of millions of dollars a year and, more to the point, changes behaviour, because banks now meter what was unmetered. The direction is being set by contracts that exist today regardless of how the rule, or Albany, lands.
Implications
On the available evidence, this is durable change: once data access carries a price, an interchange-style economics takes hold, with scale players negotiating rates and small users paying rack prices. Winners are large banks holding the customer record and efficient aggregators that can amortise fees across thousands of clients; losers are business models built on continuous free polling. The contrast abroad sharpens the point: in Europe, mandated access under PSD2 remains free of per-request bank fees (OpenBankingTracker.com, 08/06/2026), so the US is deciding alone whether financial data becomes a priced national input. The inflection window is 2026 to 2028.
Early Indicators to Monitor
- The CFPB's Section 1033 proposed rule publishes with an explicit free-request threshold and fee schedule for data providers.
- New York's S9483 or A10640 is reported out of the Banks Committee, or a second state introduces a copycat financial-data bill.
- Another top-ten US deposit bank issues aggregator pricing sheets or discloses a paid data-access agreement.
- A major aggregator introduces usage-based pricing or per-call metering into standard fintech client contracts.
- The stayed Sixth Circuit appeal over the 2024 rule is dismissed or resumed following the rewrite.
Disconfirming Signals
- The proposed rule retains the outright prohibition on data-provider fees, contradicting the reported tiered-fee design.
- New York's bills die at session end and no other state introduces successor legislation within two sessions.
- A court ruling restores the 2024 rule in force, re-imposing the fee ban on existing bank-aggregator contracts.
- Disclosed aggregator pricing stays de minimis and flat, with no premium data tiers emerging by end-2027.
- Congress enacts GUARD-style legislation that pre-empts state regimes and locks in cost-free credential-based access at scale.
Strategic Questions
- Should data-dependent fintechs lock multi-year aggregator pricing now, or wait for the proposed rule to set a fee ceiling?
- At what per-pull fee level does pay-by-bank lose its cost advantage over cards, and who absorbs the difference?
- Should banks build premium data products ahead of the rewrite, or price only to recover infrastructure cost?
Keywords
Open banking; Section 1033; CFPB; personal financial data rights; data access fees; data aggregators; Plaid; JPMorgan Chase; New York Financial Data Rights Act; pay-by-bank; screen scraping; GUARD Financial Data Act
Bibliography
Source tiers: Tier 1, governments, regulators and intergovernmental bodies. Tier 2, think-tanks, academic institutes, major consultancies and quality data providers. Tier 3, quality journalism and specialist trade press. Tier 4, vendor, company and practitioner sources, used only as directional corroboration.
- Tier 1 Senate Bill S9483, New York Financial Data Rights Act. New York State Senate (17/03/2026).
- Tier 2 The GUARD Financial Data Act Reflects a Misguided Pro-Regulatory Consensus. Cato Institute (26/05/2026).
- Tier 3 Open Banking Regulation In 2026: Federal Regulation Resurfaces As States Bring Data Sharing Into Focus. Ballard Spahr LLP (via Mondaq) (29/06/2026).
- Tier 3 Open Banking Moves From Access to Economics. PYMNTS (07/07/2026).
- Tier 3 New York Proposes Open Banking-Style Financial Data Access Legislation. Davis Wright Tremaine (04/05/2026).
- Tier 3 CFPB releases its Fall 2025 Unified Agenda of Regulatory and Deregulatory Actions. ABA Banking Journal (07/07/2026).
- Tier 3 CFPB Agenda Shows Where Existing Rules May Change. Venable LLP (17/07/2026).
- Tier 4 Open Banking Data Access Fees: JPMorgan, Plaid and the CFPB Fee Question. OpenBankingTracker.com (08/06/2026).