4 ms·
The EU has a requirement for companies to share financial data about consumers if the consumer requests it. It's designed to support services like Mint. https:
by greglindahl 7y ago
The EU has a requirement for companies to share financial data about consumers if the consumer requests it. It's designed to support services like Mint.
https://www.cnbc.com/2017/12/25/psd2-europes-banks-brace-for-new-eu-data-sharing-rules.html https://www.cnbc.com/2017/12/25/psd2-europes-banks-brace-for...
- tialaramex 7y agoAnd because this is a rule about something the banks have to enable, it gets to build in the security design you'd actually want as well. Since your bank has to help make this possible, it knows this is "Useful Spend Monitor Inc." calling the API on behalf of greglindahl and thus is allowed to see greglindahl's balance and recent transaction list but isn't allowed to create a new transfer authority for Mr A. Nigerian-Fraudster when they "somehow" get the credentials from Useful Spend Monitor Inc. That's never going to happen for services built out of scraping Internet Explorer sessions or similar shenanigans.