Introduction The European Union has long been at the forefront of financial regulation, striving to create a secure, efficient, and integrated financial market. Among its many initiatives is the CESOP (Central Electronic System of Payment Information), a key regulatory framework [1], [2] designed to enhance the oversight and security of payment systems across the EU. CESOP, as already adopted by European Parliament and EU Member States, aimed at improving the monitoring and reporting of payment transactions. The system was established as part of the EU's efforts to combat tax fraud and enhance the transparency of payment operations. By centralising payment data, CESOP allows regulatory authorities to better track cross-border transactions, identify suspicious activities, and ensure compliance with tax obligations. Objectives of CESOP Enhancing Transparency : CESOP aims to create a more transparent payment ecosystem by requiring PSPs to report detailed transaction information. This transparency helps authorities to trace the flow of funds and detect any irregularities or fraudulent activities. Combating Tax Fraud : One of the primary motivations behind CESOP is to fight tax evasion and fraud. By having a centralized repository of payment data, tax authorities can more effectively cross-check reported incomes and expenditures, reducing the opportunities for tax evasion. Strengthening Security : The centralized nature of CESOP enhances the security of payment systems. By having a robust mechanism for monitoring transactions, the EU can better protect against financial crimes such as money laundering and terrorist financing. Facilitating Cross-Border Cooperation : CESOP facilitates better cooperation among EU member states by providing a unified system for reporting and monitoring payment data. This harmonization is crucial for the efficient functioning of the single market, ensuring that all member states adhere to the same standards and practices. How CESOP Works Under CESOP, Payment Service Providers (PSPs) are required to report specific payment data to a central system managed by the European Commission. This data includes details of cross-border transactions, such as the identity of the payer and payee, the amount, and the nature of the transaction. The information collected by CESOP is then made accessible to tax authorities across the EU, enabling them to monitor and analyze payment flows effectively. The system is designed to ensure data accuracy and security, with stringent measures in place to protect sensitive information. Reporting in a nutshell PSPs providing payment services within the EU will have to report payments on a quarterly basis when all the below criteria are met: PSPs provide payment services in an EU Member State In scope payment  – merely all payment types covered by PSD2 Payer is located within the EU Payment is considered as cross-border, i.e., between EU Member States or an EU Member State and a 3rd country Exceeds the 25 cross-border payments threshold to the same payee within a calendar quarter Reporting Deadlines To ensure timely and accurate reporting, CESOP mandates specific deadlines for PSPs, i.e.: 1st period (January – March): 30 April 2nd period (April – June): 31 July 3rd period (July – September): 31 October 4th period (October – December): 31 January Implications for Payment Service Providers For PSPs, CESOP represents both a challenge and an opportunity. On one hand, PSPs need to invest in systems and processes to ensure compliance with the new reporting requirements. This might involve upgrading their IT infrastructure, training staff, and developing new protocols for data collection and reporting. On the other hand, CESOP also offers PSPs the opportunity to enhance their credibility and trustworthiness. By complying with CESOP regulations, PSPs can demonstrate their commitment to transparency and security, which can be a significant competitive advantage in the financial market. Impact on Consumers For consumers, CESOP primarily brings benefits in terms of security and transparency. With improved oversight of payment systems, consumers can have greater confidence that their transactions are secure and that financial institutions are adhering to high standards of compliance and integrity. Moreover, by reducing tax fraud and evasion, CESOP contributes to a fairer and more equitable tax system, benefiting society as a whole. While consumers might not interact with CESOP directly, the enhanced security and trust it brings to the payment ecosystem are tangible benefits. Conclusion CESOP represents a significant step forward in the EU's efforts to enhance the security, transparency, and integrity of payment systems. By centralizing payment data and improving oversight, CESOP helps combat tax fraud, strengthens financial security, and facilitates better cooperation among member states. For PSPs and consumers alike, CESOP offers a more secure and transparent financial environment, paving the way for a fairer and more efficient single market. As CESOP continues to evolve, its impact on the financial landscape will be closely watched. With ongoing developments and potential expansions of its scope, CESOP is set to play a crucial role in shaping the future of payment systems in the EU. [1] Council Directive (EU) 2020/284 of 18 February 2020 amending Directive 2006/112/EC as regards introducing certain requirements for payment service providers ( https://eur-lex.europa.eu/eli/dir/2020/284/oj ) [2] Council Regulation (EU) 2020/283 of 18 February 2020 amending Regulation (EU) No 904/2010 as regards measures to strengthen administrative cooperation in order to combat VAT fraud ( https://eur-lex.europa.eu/eli/reg/2020/283/oj )

Introduction In today's rapidly evolving digital landscape, the handling of financial data has become a focal point for regulators, businesses, and consumers alike. With the advent of new technologies and increasing digital transactions, the need for robust data governance has never been more critical. On 28 June 2023, the European Commission unveiled its legislative [1] for a new Financial Data Access (FIDA) framework. Once finalised, FIDA will expand the Open Banking data-sharing obligations, which currently apply only to payments accounts data, to nearly all financial services (FS) data. It will be the legislative backbone of open finance in the EU. FIDA also establishes rules concerning the authorisation and operation of financial information service providers. In addition to FIDA, the European Commission also published on 28 June 2023 the payment service package consisting of the Payment Services Directive 3 (PSD3), which modernises PSD2, and the payment service regulation. The payment service package bears testament to the European Commission’s priority to improve the existing regulatory regime and consumer protection in the field of data sharing. It is stressed though that FIDA covers only financial data beyond payments, as payments data is already covered by PSD framework. Understanding FIDA The Financial Data Access Regulation is a comprehensive policy initiative aimed at standardizing and securing the management and sharing of financial data across institutions. Rooted in principles of transparency, user consent, and data security, FIDA seeks to empower consumers while fostering innovation within the financial sector. Overall, under FIDA, entities holding customer data (data holders) will have to share customer data (customer) with third parties (data users).  In particular, data holders must make customer data available to data users (i.e. the so-called “Financial Information Service Providers (FISPs)”) only upon customer request: Customer/Consumer data must be made available without undue delay, in real-time. The access and information being made available are limited by the terms of the permission granted by the customer. Customers/Consumers could withdraw any such permission at any given point in time. Furthermore, data holders must provide customers with a permission dashboard, which should be user friendly and easily accessible, in order to allow customers to monitor and manage the permissions granted. Lastly, FIDA also mandates the creation of Financial Data Sharing Schemes (FDSS) to govern data access, set compensation standards as well as introduce compensation models for data sharing and establish dispute resolution mechanisms. Categories Customer Data in Scope FIDA applies to the following categories of customer data on: mortgage credit agreements, loans and accounts, except payment accounts, including data on balance, conditions and transactions; savings, investments in financial instruments, insurance-based investment products, crypto-assets, real estate and other related financial assets as well as the economic benefits derived from such assets; pension rights in occupational pension schemes; pension rights on the provision of pan-European personal pension products; non-life insurance products, with the exception of sickness and health insurance products; data which forms part of a creditworthiness assessment of a firm which is collected as part of a loan application process or a request for a credit rating. Entities Customer Data in Scope FIDA applies to the following entities when acting as data holders or data users: credit institutions; payment institutions; electronic money institutions; investment firms; crypto-asset service providers; issuers of asset-referenced tokens; managers of alternative investment funds; management companies of undertakings for collective investment in transferable securities; insurance and reinsurance undertakings; insurance intermediaries and ancillary insurance intermediaries; institutions for occupational retirement provision; credit rating agencies; crowdfunding service providers; PEPP providers; financial information service providers.  What data is covered under FIDA    According to FIDA, customers will be able to share additional data, such as: Mortgage, other loans, savings accounts, including balance, conditions and transaction details Creditworthiness assessment performed during a loan application process or a request for a credit rating Investments in financial instruments, insurance-based investment products, crypto assets, real estate and other financial assets Non-life insurance products, including data on insured assets (excluding life, health and sickness products) Suitability and appropriateness assessment under MiFID II Sustainability-related data Pension rights in occupational pension schemes and personal pension products. FIDA and 3rd Country Entities Data users that do not have an establishment in the Union but that require access to financial data in the Union shall designate, in writing, a legal or natural person as their legal representative in one of the Member States from where the data user (FISP) intends to access financial data. The designated legal representative may be held liable for non-compliance with obligations under FIDA. Key Objectives of FIDA Enhancing Consumer Control : FIDA places consumers at the heart of financial data management. It mandates that financial institutions provide users with easy access to their data, along with clear mechanisms to manage consent for data sharing with third parties. Ensuring Data Security : With rising concerns about data breaches and cyber threats, FIDA enforces stringent security protocols. Financial institutions must adopt advanced encryption technologies and robust cybersecurity measures to protect sensitive financial information. Promoting Innovation : By standardizing data formats and access protocols, FIDA aims to create a level playing field for fintech startups and traditional banks. This open-data approach encourages innovation and competition, ultimately benefiting consumers with better services and products. Fostering Transparency : Transparency is a cornerstone of FIDA. Financial institutions are required to disclose how they collect, store, and use financial data. This transparency builds trust and allows consumers to make informed decisions about their financial interactions. Implications for Financial Institutions For financial institutions, FIDA presents both challenges and opportunities. Compliance with the regulation will require significant investments in technology and infrastructure. However, these investments can lead to long-term benefits, including enhanced customer trust and the potential for new business models. Compliance and Adaptation : Financial institutions must conduct thorough audits of their data management practices and implement necessary changes to comply with FIDA standards. This may involve upgrading IT systems, retraining staff, and establishing new data governance frameworks. Customer Engagement : FIDA's emphasis on consumer control and transparency can be leveraged to enhance customer relationships. By providing clear and accessible data management tools, institutions can build stronger, trust-based connections with their clients. Innovation and Collaboration : The standardized data access protocols under FIDA encourage collaboration between traditional financial institutions and fintech companies. This synergy can lead to the development of innovative financial products and services that meet evolving consumer needs. Operational Impact : The regulation will necessitate operational changes within institutions. These may include the restructuring of data management systems, changes to internal processes to ensure compliance, and potential increases in operational costs related to implementing and maintaining new security measures. Benefits for Consumers Consumers stand to gain significantly from the implementation of FIDA. The regulation empowers individuals with greater control over their financial data, enhancing their ability to manage personal finances effectively. Informed Decision-Making : With transparent access to their financial data, consumers can make better-informed decisions about financial products and services. This transparency also enables easier comparison between different offerings, promoting more competitive markets. Enhanced Security : FIDA 's stringent security requirements ensure that consumers' financial information is safeguarded against unauthorized access and cyber threats. This increased security is crucial in maintaining consumer confidence in digital financial services. Personalized Financial Services : By allowing consumers to share their data securely with authorized third parties, FIDA facilitates the development of personalized financial services. Consumers can benefit from tailored advice, customized financial products, and improved financial health management. Timeline for Implementation FIDA Regulation is expected to come into force on 1 January 2025., which gives in scope entities a critical window to prepare for compliance. Key milestones in the implementation timeline include: Q3 2024 : Finalization of FIDA guidelines and technical standards. Q4 2024 : Publication of compliance checklists and support documents. 1 January 2025 : Expected official enforcement of FIDA. FIDA will be implemented in phases, 18 – 24 months following its official enforcement. Conclusion The Financial Data Access (FIDA) Regulation represents a pivotal shift in the financial industry, emphasizing the importance of data transparency, security, and consumer empowerment. As financial institutions adapt to this new regulatory environment, the ultimate beneficiaries will be the consumers, who will enjoy greater control, enhanced security, and improved financial services. FIDA not only sets a new standard for financial data management but also paves the way for a more innovative, transparent, and consumer-centric financial ecosystem. [1]  https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52023PC0360