📊 Full opportunity report: The mandate. Why the US conversational- finance surface does not translate to Europe. on ThorstenMeyerAI.com — validation score, market gap, and execution plan.

OpenAI’s personal-finance surface launched in the US on May 15, 2026, without regulatory approval, using permissionless account aggregation. In Europe, this approach is impossible due to strict licensing and consent requirements embedded in existing and upcoming regulations, fundamentally changing how such surfaces can be built.

In the US, the launch was permissionless: companies could connect user accounts across thousands of institutions via APIs like Plaid without needing licenses or regulatory approval. This facilitated rapid deployment and innovation, making the platform a product built on a permissionless, open substrate.

In contrast, Europe’s regulatory environment treats account access as a regulated activity. The PSD2 directive, enacted in 2018, established a licensing regime for third-party providers (TPPs), requiring them to operate under strict rules. The upcoming PSD3 and the Payment Services Regulation (PSR), expected to be finalized in 2026 and implemented by 2027-2028, will extend this licensing requirement to cover open finance, including investments, pensions, and loans, through the FIDA regulation, which is still in trilogue and likely operational around 2029-2030.

Additionally, the EU AI Act classifies AI systems used for credit scoring and financial assessments as high-risk, with obligations starting August 2026. These rules are enforced by financial regulators like BaFin in Germany, not tech regulators, adding a layer of oversight that is absent in the US environment.

As a result, the European version of a permissionless finance surface is not a simple port but a licensed, consent-driven product. It involves compliance with multiple overlapping regimes—licensing, consent architecture, AI classification—and is built around a regulatory framework that emphasizes consent dashboards, conformity assessments, and licensing as core components.

Implications of Regulatory Divergence for Market Entry

European Regulatory Framework for Open Finance and AI

The European Union’s approach to open finance is built on a foundation of regulation rather than permissionless APIs. PSD2, enacted in 2018, established a licensing regime for third-party providers accessing bank data. The upcoming PSD3 and PSR are extending this model, with the FIDA regulation aiming to cover broader financial data types, including investments and loans. These frameworks are still in development, with operational dates expected around 2029-2030.

Simultaneously, the EU AI Act, finalized in 2026, classifies certain AI systems used in finance as high-risk, imposing strict obligations on their development and deployment. These rules are enforced by financial regulators such as BaFin, not solely by tech authorities, adding complexity to compliance.

In the US, the environment is characterized by a largely unregulated, permissionless infrastructure, where API keys and aggregator platforms like Plaid operate without licensing. The divergence in regulatory architecture underscores why the same product approach cannot be simply transposed across the Atlantic.

“The American permissionless finance surface is built on a substrate that Europe cannot replicate. Its architecture is fundamentally different, governed by mandates and licenses, not APIs and permissionless access.”

— Thorsten Meyer

Unclear Impact on Market Competition and Innovation

It remains uncertain whether Europe’s licensing and consent-driven approach will lead to better consumer protection, more innovation, or increased market concentration. The long-term effects of the regulatory architecture on competitive dynamics and technological development are still unfolding, and the actual market behavior post-implementation of PSD3, FIDA, and the AI Act is yet to be observed.

Next Steps for Regulatory Implementation and Market Entry

European regulators are expected to finalize PSD3, PSR, and FIDA regulations in 2026, with operational phases beginning around 2029-2030. Meanwhile, US firms are assessing how to adapt their permissionless platforms to meet these new regulatory requirements, potentially leading to the emergence of licensed European equivalents. The ongoing development of AI obligations will further shape the landscape, influencing how AI-driven financial services are built and regulated across the continent.

Key Questions

Why can’t US permissionless finance platforms operate directly in Europe?

Because European regulations treat account access as a licensed activity, requiring firms to obtain licenses, consent mechanisms, and comply with strict AI and data rules. US permissionless models are built on unregulated API access, which is incompatible with Europe’s mandate-driven framework.

What are the main regulatory regimes affecting European financial surfaces?

The main regimes are PSD2/PSD3 for open banking, FIDA for open finance, and the AI Act for AI systems. These create a layered, license-based architecture that differs from the US permissionless approach.

Who is likely to build the European version of a financial surface?

Licensed, consent-native firms that are compliant with the complex regulatory regimes are better positioned. US firms that rely on permissionless APIs face significant barriers to entry.

Will this regulatory approach lead to better consumer outcomes?

The impact is still uncertain. The architecture prioritizes compliance and safety, which could improve consumer protection, but may also slow innovation and concentrate market power among incumbents.

Source: ThorstenMeyerAI.com