The Autoritรฉ des Marchรฉs Financiers (AMF), France's financial markets authority, has published proposals for an **open finance framework** via a public consultation, extending open banking principles to broader financial data sharing for enhanced innovation and competition. This matters for compliance professionals as it signals upcoming regulatory requirements for secure data access, APIs, and customer consent mechanisms, aligning with EU trends toward open finance while prioritizing consumer protection and market resilience. Firms must engage early to shape the final rules and prepare systems for compliance.
#
What Changed
The publication outlines AMF's proposals for an open finance framework, building on open banking (e.g., PSD2) to include investments, insurance, and asset management data. Key elements include:
Mandatory API-based data sharing for account information and payment initiation, extended to non-banking products like securities and insurance.
Enhanced customer consent and control mechanisms, with granular permissions, revocation rights, and strong authentication.
Security and liability standards align
What You Need To Do
- Review and respond to consultation
- Conduct gap analysis
- Update policies
- Engage stakeholders
- Test systems
Key Dates
January 14, 2026 - AMF publishes 2026 priorities, including open finance as part of innovation framework.
TBD (consultation period) - Public consultation on open finance proposals; firms should check AMF site for exact submission deadline (typically 1-3 months post-publication). DEADLINE
June 30, 2026 - End of MiCA transitional period, relevant for crypto/open finance intersections.
2026 (H2) - Expected finalization of AMF AI roadmap and tokenization consultation, influencing open finance APIs.
likely 2027 implementation phased over 12-24 months.
Compliance Impact
Urgency: High โ As a consultation, immediate engagement is critical to shape rules, but full implementation may not hit until 2027+. It matters due to alignment with AMF's 2026 priorities on innovation (AI, tokenization, MiCA) and resilience (DORA, cybersecurity), risking fines or supervisory action