Skip to Content

Daniel Paul, Chief Data-Protection Officer at CGI discusses Open Banking at the Canada Fintech Forum

Further to Rob Galaski's talk in the morning regarding the global status of Open Banking, Daniel Paul discusses it with respect to the EU, using the example of the GDPR.

For those looking for a quick debrief of what the GDPR is, it is essentially a document aimed at informing corporations on how to treat client information. It comprises of 6 key principles:

  1. Purpose Limitation
  2. Data Minimization - gathering only the minimal amount of data required
  3. Data Accuracy - everything must be accurate during the time the data is being utilized
  4. Confidentiality & Integrity - must be protected and confidential at all times
  5. Lawful - in line with existing legislation
  6. Individual Privacy Rights

So what does this mean to the consumer?

If an organization wants more data from you, they must explain why, how it will reside, and if it will go beyond the EU border. As a customer you also have the right to know how the data will be utilized with an increased affirmation that once the data has served its purpose, it must be deleted. If the data will serve more than one purpose, than the consent needs to be given for each of the purposes it will be used for. And, as a consumer you have the right to withdraw your consent at anytiime.

Consumer protectionism & earning consumer trust are the future.


Join in on the conversation with Aqsa Zubair when you subscribe to Future of Financial Services.