TD Cowen sees new open banking rule coming in weeks

CFPB is expected to release a revised Section 1033 open-banking proposal in late August/early September after submitting it to the Office of Management and Budget for review. TD Cowen expects a compromise allowing some data transfers without fees while giving banks liability protection, but flags potential legal challenges and estimates ~9 months to process comments and finalize the rule—risking court blocks that could leave data-sharing arrangements unresolved.

Analysis

This is less a broad “open banking is bullish fintech” story than a rules-of-the-road reset that likely tilts bargaining power toward balance-sheet incumbents. If banks can charge for data access and offload breach liability, the incremental economics move from pure disintermediation toward a toll-road model: slower user acquisition, higher compliance spend, and lower conversion for bank-linked fintech flows. That is structurally supportive for large banks’ deposit-stickiness and cross-sell, but it compresses the growth multiple of platforms whose unit economics depend on frictionless bank connectivity.

The second-order winner set is probably not just JPM/BAC/WFC but also cyber, fraud, and identity vendors if liability shifts onto fintechs. That means more budget for controls, monitoring, and authentication, but the near-term P&L hit to fintechs should arrive faster than the security spend uplift, especially for subscale names with weaker gross margins and higher customer acquisition costs. The biggest losers are “aggregator-dependent” businesses where every extra basis point of data-access cost hits volume conversion and payback periods.

The market may underprice the litigation overhang. Even if the proposal looks bank-favorable, the 9-12 month legal path means the right trade is probably event-driven rather than directional today; the first catalyst is the draft language, not the final rule. A true reversal would be a court stay or an election-driven policy pivot that reintroduces fee caps / liability asymmetry in 2026.

Contrarian view: consensus may assume any formal open-banking framework boosts competition and platform adoption. In reality, if pricing power over data access is legalized, the rule can entrench the largest incumbents while making smaller fintechs pay for the privilege of competing on their rails.

Key Decisions for Investors

• Watch for the draft text; if it permits bank data fees and meaningful liability transfer, buy JPM/BAC vs. short ARKF or FINX for a 1-3 month event-driven relative-value trade.
• On a post-release rally in fintechs, fade PYPL/SQ/SOFI/AFRM into strength with a basket short; thesis: onboarding friction and compliance costs delay revenue conversion more than banks lose share.
• If the proposal reads bank-favorable, pair long XLF against short a fintech ETF rather than single names to avoid idiosyncratic headline risk; target a 5-10% relative move over the comment period.
• Add a small long in cyber/identity beneficiaries (e.g., CRWD or ZS) only on weakness; the spend uplift is a 6-18 month follow-through, not a same-day catalyst.
• No new position if the language is vague or fee rights are deferred to future rulemaking; that outcome is a hold-the-line signal, not a tradable edge.