regulation

A. Overview

On 20 October 2020, Regulation (EU) 2020/1503 of 7 October 2020 on European crowdfunding service providers for business (“Crowdfunding Regulation”), which applies from 10 November 2021, was published in the Official Journal of the European Union. This is the first regulation of crowdfunding services on a European level. Up to now, crowdfunding has been governed under the various national laws of the Member States. A consequence of this is the fragmentation of applicable regulatory regimes which makes the provision of cross-border crowdfunding services almost impossible. The key aim of the Crowdfunding Regulation is to change this position by fostering cross-border crowdfunding services in the Union while at the same time to ensure a high level of investor protection.
Continue Reading European Crowdfunding Regulation

In a joint report (the “Report”) published on 7 January 2019, the EU’s three financial industry watchdogs considered the need for potential strategies to help coordinate and promote innovation in the EU fintech space.

The Report by the European Securities and Markets Authority (“ESMA”), European Banking Agency (“EBA”) and European Insurance and Occupational Pensions Authority

The Payment Services Directive (PSD2), which took effect on January 13, 2018, puts an obligation on banks to give Third Party Providers (TPPs) access to a customer’s payment account data, provided the customer expressly consents to such disclosure. The new legislation is intended to improve competition and innovation in the EU market for payment services. The General Data Protection Regulation (GDPR), which is due to take effect from May 25, 2018, enhances individuals’ rights when it comes to protecting their personal data. The interaction between PSD2, aimed at increasing the seamless sharing of data, and the GDPR, aimed at regulating such sharing, raises complicated compliance concerns.

For example, where banks refrain from providing TPPs access to customer payment data for fear of breaching the privacy rights of their customers under the GDPR, competition authorities may consider this a breach of competition law. This concern is already becoming a reality for banks – on October 3, 2017, the European Commission carried out dawn raids on banking associations in Poland and the Netherlands following complaints from fintech rivals that the associations were not providing them with what they considered legitimate access to customer payment data.

Continue Reading Overlap Between the GDPR and PSD2