Consumer-driven banking (Canada)
Also known as: Canadian open banking, Consumer-Driven Banking Act, open banking Canada, CDB
Consumer-driven banking is Canada's name for open banking: a federal framework that will let Canadians direct their bank to share their financial data with accredited third parties, and later let those parties make payments or switch accounts on their behalf.
While the name sounds like marketing, it signals a real policy choice to frame data sharing as a consumer right rather than a favour banks grant. The catch is the timeline. Canada started studying this in 2018 and the full version is still years away.
Consumer-driven banking (Canada), explained at three levels
At home
Think of your bank data like mail held at the post office. Today, many Canadian apps get it by borrowing your house key: you hand over your online banking password and they let themselves in. Consumer-driven banking is the federal plan to replace that with a signed pickup slip. You tell your bank which app may collect which records, the bank hands them over directly, and you can cancel the slip whenever you like.
At work
Consumer-driven banking is Canada's federal open banking framework. It sets rules so a customer can tell their bank to send their financial data straight to an accredited business, such as a lender, accountant, or mortgage broker. For businesses, that means verified data arrives through a standard connection instead of scanned statements or password-based scraping, with clear rules on security, consent, and who is liable when something goes wrong.
At home
The framework is being built in two phases. The first is 'read access': sharing your account data with an accredited app. The second is 'write access': letting that app act for you, such as making a payment or switching your account to another bank. Only accredited participants will be allowed in, and there will be rules on liability if something goes wrong.
At work
Key design elements include a federal accreditation regime, a single technical standard for data sharing, liability rules that favour consumers, and coverage for provincially regulated credit unions that opt in. The data-mobility right itself is being added through privacy law changes. Fintechs should plan for accreditation requirements on security, insurance, and complaint handling, and watch how the Bank of Canada's oversight role takes shape.
At home
The interesting technical bet is the dependency on the Real-Time Rail. Write access without an instant payment rail would mean slow, batch-settled payments with awkward failure handling, so Ottawa tied the next phase to the RTR. I think that's the right call, even though it means Canadians wait longer. A payment-initiation feature bolted onto overnight batch settlement would have repeated the mistakes other countries are still cleaning up.
At work
Watch three things: the technical standard (whether Canada aligns with FDX, which most North American aggregators already support), the liability allocation between banks and accredited third parties, and how the Bank of Canada coordinates this with its existing supervision of payment service providers under the Retail Payment Activities Act. Firms already registered as PSPs with the Bank of Canada may find parts of the accreditation familiar, but data security obligations will be a separate and heavier lift.
Real-world examples
At home
Carlos uses a tax-prep app that asks for his online banking password every spring to pull his RRSP contribution receipts. He's always been uneasy about it. Once consumer-driven banking is live, his bank will offer a permissioned connection instead, so the app sees only what it needs and Carlos never shares his password again.
At work
Lena leads product at a Toronto fintech that helps small businesses manage cash flow. Her team has been relying on screen scraping and losing connections every time a bank changes its login page. She's now budgeting for accreditation under the consumer-driven banking framework and planning a migration to a standardized API, which should make the product more reliable and easier to sell to cautious clients.
Common confusions
- Consumer-driven banking is already fully live in Canada. — The law received Royal Assent in 2024, but the framework is being phased in. Read access was targeted for 2026, but in early 2026 the Bank of Canada declined to commit to a firm date. Write access is targeted for mid-2027.
- Any app will be able to access my bank data. — Only accredited participants that meet federal security and liability requirements will be allowed in, and only with your explicit consent.
- It's a completely different thing from open banking. — It is Canada's version of open banking. The name emphasizes that the consumer, not the bank or the app, directs the data.
For analysts
If you work in Canadian financial services, the mid-2027 write-access date is the one to plan around, but don't wait for it to start. I'd use the time to clean up how your product handles consent, logging, and data minimization, because accreditation will reward the firms that already behave as though the rules are in force.
History & origin
Ottawa launched a formal review of open banking in 2018, and an advisory committee reported in 2020 and 2021 that a made-in-Canada system was needed. A dedicated open banking lead was appointed in 2022, the 2023 Fall Economic Statement committed to a framework, and Budget 2024 laid out its design. The Consumer-Driven Banking Act received Royal Assent in June 2024 as part of that year's budget legislation, initially giving oversight to the Financial Consumer Agency of Canada. Budget 2025, tabled on November 4, 2025, shifted oversight to the Bank of Canada and committed to legislating 'write access' (letting accredited apps initiate actions such as payments or account switching) by mid-2027, tied to the launch of Payments Canada's Real-Time Rail. In my view, Canada's slow pace has been costly. Millions of Canadians have spent those years handing banking passwords to screen-scraping apps because the safe alternative did not exist.