Is Canada's Open Banking Rollout a Revolution or a Read-Only Start?
In brief: Canada's consumer-driven banking framework will begin rolling out from 2026, but the first phase grants only read access to financial data, excludes payments and account switching, and hands oversight to the Financial Consumer Agency of Canada. For institutions, this is a compliance and infrastructure milestone, not a market rupture. The disruptive features, chiefly write access and payment initiation, are deferred to a second phase targeted for mid-2027.
Canada's open banking rollout is real, legislated, and finally moving, but institutions expecting an overnight reordering of retail finance should temper that expectation. Consumer-driven banking, the term Ottawa prefers to open banking, is a regulated system that lets individuals and small businesses direct a bank to share their financial data securely with an accredited third party of their choosing. What arrives first is a read-only version of that promise. The mechanics that would let a fintech move money or switch an account on a customer's behalf are not in the opening act.
What did Canada actually pass, and when does it start?
The framework was built across two pieces of legislation. The government announced the initial framework in Budget 2024 and passed the first tranche of the Consumer-Driven Banking Act in June 2024, covering governance, scope, and the criteria for a technical standard. The second and completing tranche, Bill C-15, received Royal Assent on 26 March 2026, finishing the statutory scaffolding and adding an express prohibition on screen scraping.
That timeline matters because it has slipped repeatedly. Canada's work on open banking began in earnest in 2018 and originally targeted January 2023 as a launch date. That date passed, and the prorogation of Parliament in January 2025 paused progress again. The 2024 Fall Economic Statement reset the ambition to a launch in early 2026. In June 2026 the Department of Finance pre-published draft Consumer-Driven Banking Regulations in the Canada Gazette, the operational detail on top of the statute. Eight years from committee to rollout is not the cadence of a revolution.
Who oversees it, and how is the model funded?
The Financial Consumer Agency of Canada is the lead body. Legislative amendments expanded the FCAC's mandate to include oversight, administration, and enforcement of the framework: monitoring participants, maintaining the framework's integrity and security, enforcing common rules, accrediting entities, keeping a public registry, and overseeing the technical standard. The Act also created a Senior Deputy Commissioner of Consumer-Driven Banking inside the agency.
Funding is modest, which itself signals the scale of ambition. The Bank of Canada was allocated up to CAD 19.3 million over two years for implementation work, with roughly CAD 5 million per year in administrative costs thereafter. Compared with the multi-year, industry-funded build-outs seen elsewhere, this is a lean, government-anchored program rather than a sweeping infrastructure project.
What is actually in scope in the first phase?
Here is the crux of the "don't expect a revolution" case. Phase one, covered by Bill C-15, focuses on read access, letting a consumer direct their data to a participating entity. The scope of shareable data, per the government's own specification, initially covers chequing and savings account operations, investment products available through online portals, and lending products such as credit cards, lines of credit, and mortgages.
What is absent is the part that changes behaviour. There is no payment initiation, no ability to move funds, and no account switching in phase one. Those capabilities sit in a second phase targeted for mid-2027, and that phase is contingent on the rollout of Canada's Real-Time Rail payments infrastructure. In other words, the transactional layer that lets open banking compete with card networks and incumbent transfer systems depends on a separate piece of national plumbing that is not yet live. A read-only regime lets a budgeting app or a lender see a verified picture of a customer's finances. It does not let a challenger reroute the customer's money. That distinction is the difference between a useful data utility and a genuine shift in market power.
Does the screen-scraping ban change the competitive picture?
One feature does have teeth. Bill C-15 bans screen scraping, the practice where roughly nine million Canadians currently hand their banking credentials to third-party apps that log in and copy data. Replacing that with a regulated, permissioned data channel is a real security and liability improvement, and it forces every fintech that relied on scraping onto the accredited framework. That is a meaningful operational change for data aggregators and the institutions that depend on them. But it is a modernisation of an existing data flow rather than the arrival of a new one. The plumbing gets safer; the water goes to the same places.
How does Canada compare with the UK, EU, and Australia?
The international record explains the caution. The UK built what is widely regarded as the most successful open banking market, and even there adoption took years. Following PSD2 in 2018 and a mandate on its nine largest banks, the UK reached a landmark of more than two billion API calls and around 15 million active users by late 2025, but that penetration accumulated slowly and only became part of everyday financial life well after launch. The EU's PSD2 delivered uneven results across member states, and the bloc is already legislating PSD3 to fix gaps.
Most instructive is Australia, whose Consumer Data Right is the model Canadian analysts most often invoke as a cautionary tale. Launched for banking in 2020, the CDR struggled with low consumer uptake and high compliance costs for accredited data recipients, prompting a government strategic review. Canadian commentators have warned directly that Canada's open banking risks repeating Australia's failure if it launches a read-only, narrowly scoped system without a clear path to payments and open finance.
| Jurisdiction | Start | Scope at launch | Notable outcome |
|---|---|---|---|
| United Kingdom | 2018 (PSD2 plus CMA mandate) | Read and payment initiation | ~15 million users, 2 billion-plus monthly API calls by 2025 |
| European Union | 2018 (PSD2) | Read and payment initiation | Uneven adoption, now moving to PSD3 |
| Australia | 2020 (Consumer Data Right) | Read access, phased | Low uptake, high compliance cost, strategic review |
| Canada | 2026 (phase 1), 2027 (phase 2) | Read access only at launch | Payments and switching deferred to phase two |
The pattern is consistent: the jurisdictions that included payment initiation from the start saw the deepest engagement, and even they needed years. Canada is beginning without that transactional layer, which is precisely why measured expectations are warranted.
What should institutions do before 2027?
The near-term work is about readiness, not disruption. Banks and other data holders will need to meet the technical standard, satisfy FCAC accreditation and registry requirements, and retire screen-scraping dependencies in favour of the sanctioned channel. Lenders and asset managers should treat the read-only phase as a chance to build data-driven products on a verified, permissioned foundation, because the customers and partners who onboard in the read phase are the ones positioned to move first when write access and real-time payments arrive.
For institutions that already think in terms of programmable, composable, and auditable financial data, Canada's framework is a familiar shape rendered in regulation: permissioned access, a registry of accredited participants, and an enforceable rulebook. Issuant's view is that the value is not in the launch date but in the discipline the framework rewards, the institutions that treat auditable data-sharing as core infrastructure will be the ones that benefit when the second phase turns a data utility into a payments capability. The revolution, if it comes, is scheduled for the sequel.
How Issuant helps
Issuant builds the operational layer for programmable, composable, auditable digital assets — so institutions can adapt without re-plumbing.
Share / cite