Skip to main content
Log in

The road to RegTech: the (astonishing) example of the European Union

  • Original Article
  • Published:
Journal of Banking Regulation Aims and scope Submit manuscript

Abstract

Europe’s road to RegTech has rested upon four apparently unrelated pillars: (1) extensive reporting requirements imposed after the Global Financial Crisis to control systemic risk and change in financial sector behaviour; (2) strict data protection rules reflecting European cultural concerns about data privacy and protection; (3) the facilitation of open banking to enhance competition in banking and particularly payments; and (4) a legislative framework for digital identification to further the European Single Market. The paper analyses these four pillars and suggests that together they are underpinning the development of a RegTech ecosystem in Europe and will continue to do so. We argue that the European Union’s financial services and data protection regulatory reforms have unintentionally driven the use of regulatory technologies (RegTech) by intermediaries, supervisors and regulators, and provided an environment within which RegTech can flourish. The experiences of Europe in this process will provide insights for other societies in developing their own RegTech ecosystems in order to support more efficient, stable, inclusive financial systems.

This is a preview of subscription content, log in via an institution to check access.

Access this article

Price excludes VAT (USA)
Tax calculation will be finalised during checkout.

Instant access to the full article PDF.

Similar content being viewed by others

References

  1. Buckley, R.P., and D.W. Arner. 2011. From crisis to crisis: The global financial system and regulatory failure. The Netherlands: Kluwer Law International.

    Google Scholar 

  2. Buckley, R.P., E. Avgouleas, and D.W. Arner. 2016. Reconceptualizing global finance and its regulation. New York: Cambridge University Press.

    Book  Google Scholar 

  3. Arner, D.W., J.N. Barberis, and R.P. Buckley. 2017. Fintech, RegTech and the Reconceptualisation of Financial Regulation. Northwest J Int Law Bus. 37 (3): 371–413.

    Google Scholar 

  4. Institute of International Finance. 2016. RegTech in financial services: Technology solutions for compliance and reporting, 25. Washington, DC: Institute of International Finance.

    Google Scholar 

  5. Arner, D.W., J.N. Barberis, and R.P. Buckley. 2016. The Emergence of Regtech 2.0: From Know Your Customer to Know Your Data. Journal of Financial Transformation. 44: 79–98.

    Google Scholar 

  6. Enriques, L. 2017. Financial Supervisors and Regtech: Four Roles and Four Challenges. Revue Trimestrielle De Droit Financier. 53: 1–9.

    Google Scholar 

  7. Directive, 2011/61/EU of the European Parliament and of the Council of 8 June 2011 on Alternative Investment Fund Managers and amending Directives 2003/41/EC and 2009/65/EC and Regulations (EC) No 1060/2009 and (EU) No 1095/2010, OJ L 174, 1 July 2011.

  8. Regulation (EU) No 648/2012 of the European Parliament and of the Council of 4 July 2012 on OTC derivatives, central counterparties and trade repositories, OJ L 201, 27 July 2012.

  9. Directive 2013/36/EU of the European Parliament and of the Council of 26 June 2013 on access to the activity of credit institutions and the prudential supervision of credit institutions and investment firms, amending Directive 2002/87/EC and repealing Directives 2006/48/EC and 2006/49/EC, OJ L 176, 27 June 2013.

  10. Regulation (EU) No 575/2013 of the European Parliament and of the Council of 26 June 2013 on prudential requirements for credit institutions and investment firms and amending Regulation (EU) No 648/2012, OG L 176, 27 June 2013.

  11. Directive 2014/65/EU of the European Parliament and of the Council of 15 May 2014 on markets in financial instruments and amending Directive 2002/92/EC and Directive 2011/61/EU, OJ L 173, 12 June 2014.

  12. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119, 4 May 2016.

  13. Directive (EU) 2015/2366 of the European Parliament and of the Council of 25 November 2015 on payment services in the internal market, amending Directives 2002/65/EC, 2009/110/EC and 2013/36/EU and Regulation (EU) No 1093/2010, and repealing Directive 2007/64/EC, OJ of 23 Dec 2015, L 337/35.

  14. Regulation (EU) No 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC, OJ L 257, 28 Aug 2014.

  15. Zetzsche, D.A., R.P. Buckley, D.W. Arner, and J.N. Barberis. 2018. From FinTech to TechFin: The Regulatory Challenges of Data-Driven Finance. NYU J Law Bus. 14 (2): 393–446.

    Google Scholar 

  16. Cohen, J. 2013. What Privacy Is For. Harvard Law Rev. 126 (7): 1904–1932.

    Google Scholar 

  17. Barocas, S., and A. Selbst. 2016. Big Data’s Disparate Impact. Calif Law Rev. 104 (3): 671–732.

    Google Scholar 

  18. The IoT is a network of devices and applications containing software, electronics, actuators and connectivity that allows these things to connect, interact and exchange data.

  19. Weber, R.H., and R. Weber. 2010. Internet of things: Legal perspectives. Berlin: Springer.

    Book  Google Scholar 

  20. Russel, S., and P. Norvig. 2009. Artifical intelligence: A modern approach, 3rd ed. Upper Saddle River, NJ: Prentice Hall.

    Google Scholar 

  21. Zetzsche, D.A., R.P. Buckley, and D.W. Arner. 2018. The Distributed Liabilty of Distributed Ledgers: Legal Risks of Blockchain. Univ Ill Law Rev. 4: 1361–1406.

    Google Scholar 

  22. Rodrigues, U. 2019. Law and the Blockchain. Iowa Law Review 104 (2): 679–729.

    Google Scholar 

  23. Sklaroff, J. 2017. Smart Contracts and the Cost of Inflexibility. University of Pennsylvania Law Review 166 (1): 263–303.

    Google Scholar 

  24. Werbach, L., and N. Cornell. 2017. Contracts Ex Machina. Duke Law Review 67 (2): 313–370.

    Google Scholar 

  25. Weber, R.H. 2019. Smart Contracts: Do We Need New Legal Rules? In Digital revolution—New challenges for law eds. by Franceschi, Schulze, Graziadei, Riente, Sica, Sirena (forthcoming).

  26. Arner, D.W., D.A. Zetzsche, R.P. Buckley, and J.N. Barberis. 2019. The Identity Challenge in Finance: From Analogue identity to Digitized Identification to Digital KYC Utilities. Eur Bus Org Law Rev. 20 (1): 55–80.

    Article  Google Scholar 

  27. Gutfleisch, G. 2018. Crowdfunding and Initial Coin Offerings Under The EU Legal Framework. European Company Law Journal 15 (3): 73–82.

    Google Scholar 

  28. Zetzsche, D.A., and C. Preiner. 2018. Cross-Border Crowdfunding Towards a Single Crowdfunding Market. European Business Organization Law Review 19 (2): 217–251.

    Article  Google Scholar 

  29. Nabilou, H., and Prüm, A. 2019. Ignorance, Debt and Cryptocurrencies: The Old and the New in the Law and Economics of Concurrent Currencies. Journal of Financial Regulation (forthcoming).

  30. Zetzsche, D.A., Buckley, R.P., Arner, D.W., and Föhr, L. 2019. The ICO Gold Rush: It’s a Scam, It’s a Bubble, It’s a Super Challenge for Regulators. Harvard International Law Journal (forthcoming).

  31. Dell’Erba, M. 2018. Initial Coin Offerings: The Response of Regulatory Authorities. NYU Journal of Law & Business 14 (3): 1107–1136.

    Google Scholar 

  32. Maume, P. 2017. In Unchartered Territory—Banking Supervision Meets Fintech. Corp Finance 272: 373–388.

    Google Scholar 

  33. Ringe, W., and Ruof, C. 2018. A Regulatory Sandbox for Robo Advice. EBI; 2018. EBI Working Paper Series 26/2018.

  34. Basel Committee on Banking Supervision. 2013. Principles for effective risk data aggregation and risk reporting, 28. Switzerland: Basel Committee on Banking Supervision.

    Google Scholar 

  35. Arner, D.W., Zetzsche, D.A., and Buckley, R.P. 2019. FinTech, RegTech and Systemic Risk: The Rise of Global Technology Risk. In Systemic risk in the financial sector: Ten years after the global financial crisis, eds. D.W. Arner, E. Avgouleas, D. Bush, S. Schwarcz (forthcoming).

    Chapter  Google Scholar 

  36. Zetzsche, D.A., R.P. Buckley, D.W. Arner, and J.N. Barberis. 2017. Regulating a Revolution: From Regulatory Sandboxes to Smart Regulation. Fordham Journal of Corporate and Financial Law 23 (1): 31–103.

    Google Scholar 

  37. Weber, R.H., and R. Baisch. 2018. FinTech—Eligible Safeguards to Foster the Regulatory Framework. Journal of Financial Regulation and Compliance 33 (10): 335–350.

    Google Scholar 

  38. Ernst & Young. 2016. Innovating with RegTech, EYGM Ltd; 2016. Available from: http://www.ey.com/Publication/vwLUAssets/EY-Innovating-with-RegTech/$FILE/EY-Innovating-with-RegTech.pdf.

  39. Weber, R.H. 2017. RegTech as a New Legal Challenge. Journal of Financial Transformation 46: 10–17.

    Google Scholar 

  40. Financial Conduct Authority. 2017. FCA Fines Merrill Lynch £34.5 Million for Failing to Report Transactions [Internet]. London, UK: Financial Conduct Authority; 2017 [updated 2017 Oct 23; cited 2019 Apr 9]. Available from: https://www.fca.org.uk/news/press-releases/fca-fines-merrill-lynch-failing-report-transactions.

  41. MiFID II has now extended these reporting requirements even further.

  42. Colaert, V. 2018. RegTech as a Response to Regulatory Expansion in the Financial Sector. 2018 Jun. Working Paper. Available from: https://ssrn.com/abstract=2677116.

  43. Zepeda, R. 2017. The 2018 Big Bang. 2017 Aug. Working Paper. Available from: https://ssrn.com/abstract=3029145.

  44. Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (OJ L 281, 23 Nov 1995).

  45. The interpretation of the notion of extraterritorial effect has been recently clarified by the European Data Protection Board: European Data Protection Board. Guidelines 3/2018 on the territorial scope of the GDPR (Article 3) [Internet]. Brussels: EDPB; 2018 [updated 2019 Jan 18; cited 2019 Apr 9]. Available from: https://edpb.europa.eu/our-work-tools/public-consultations/2018/guidelines-32018-territorial-scope-gdpr-article-3_en.

  46. The EU has introduced a specific data protection regime governing electronic communications, namely Directive 2002/58. Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) (OJ L 201, 31.7.2002).

  47. This Directive should be replaced shortly by a so-called E-Privacy Regulation but the entire process is being delayed by political considerations. European Commission. Proposal for an ePrivacy Regulation [Internet]. Brussels: EC; 2018 [cited 2019 Apr 9]. Available from: https://ec.europa.eu/digital-single-market/en/proposal-eprivacy-regulation.

  48. Zachariadis, M., and Ozscan, P. 2017. The API Economy and Digital Transformation in Financial Services: The Case of Open Banking. SWIFT; 2017 Jun. Institute Working Paper No. 2016-001. Available from: https://ssrn.com/abstract=2975199.

  49. On the PSD 2’s approach to open banking: Valcke P, Vandezande N, Van de Velde N. The Evolution of Third Party Payment Providers and Cryptocurrencies Under the EU’s Upcoming PSD2 and AMLD4. SWIFT; 2015 Sep. Institute Working paper No. 2015-001. Available from: https://ssrn.com/abstract=2665973.

  50. Zunzunegui, F. 2018. Digitalisation of Payment Services. Ibero-American Institute for Law and Finance; 2018 Sep. Working Paper No. 5/2018. Available from: https://ssrn.com/abstract=3256281.

  51. Colangelo, G., and Borgogno, O. Data, Innovation and Transatlantic Competition in Finance: The Case of the Access to Account Rule. Stanford-Vienna Transatlantic Technology Law Forum; 201. EU Law Working Paper No. 35. Available from: https://ssrn.com/abstract=3251584.

  52. Geva, B. 2018. Payment Transactions Under the EU Second Payment Services Directive (PSD2)—An Outsider’s View. Texas International Law Journal. Available at: https://ssrn.com/abstract=3292313. (forthcoming).

  53. Australian Open Banking Initiative. 2018. Review into Open banking in Australia: Final Report. Canberra: Department of the Treasury; 2018 Mar. Available from: https://treasury.gov.au/consultation/c2018-t247313/.

  54. Bastin, R., Hedea, I., and Cisse, I. 2016. A Big Step towards the European Digital Single Market. Inside Issue. 2016 Oct; 13: 70–77. Available from: https://www2.deloitte.com/lu/en/pages/about-deloitte/articles/inside/inside-issue13.html.

  55. European Commission. 2017. Consumer Financial Services Action Plan: Better Products, More Choice [Internet]. Brussels: EC; 2017 Mar. Available from: https://ec.europa.eu/info/publications/consumer-financial-services-action-plan_en.

  56. Financial Stability. 2016. Financial Services and Capital Markets Union. Study on the impact of digitalisation on the EU single market for consumer financial services [Internet]. Brussels: EC; 2016 Jul. Available from: https://ec.europa.eu/info/publications/study-impact-digitalisation-eu-single-market-consumer-financial-services_en.

  57. Stacey, K. 2019. Senior Democrat Suggests ‘Glass-Steagall Law for Tech Companies’. Financial Times [Internet]. 2019 Mar 4. Available from: https://www.ft.com/content/561b8546-355c-11e9-bd3a-8b2a211d90d5.

  58. Flannery, M.J. 2015. Economic Analysis: Providing Insight to Advance the Missions of the SEC and the PCAOB. U.S. Securities and Exchange Commission [Internet], 2015 Oct 22. Available from: https://www.sec.gov/news/speech/keynote-address-pcaob-missions-of-sec-and-pcaob.html.

  59. Office of the Comptroller of the Currency. 2019. Capital. US Department of Treasury [Internet], 2019. Available from: https://www.occ.treas.gov/topics/capital/index-capital.html.

  60. India Stack. 2019. What is India Stack? India Stack [Internet], 2019. Available from: https://indiastack.org/about/.

  61. India Stack. 2019. About eKYC API. India Stack [Internet], 2019. Available from: https://indiastack.org/ekyc/.

  62. Privacy International. 2017. Fintech: Privacy and Identity in the New Data-Intensive Financial Sector. London, UK: Privacy International; 2017 Nov. Available from: https://privacyinternational.org/sites/default/files/2017-12/Fintech%20report.pdf.

  63. India Stack. 2019. About Aadhaar Auth API. India Stack [Internet], 2019. Available from: https://indiastack.org/aadhaar/.

  64. Arner, D.W., Buckley, R.P., and Zetzsche, D.A. FinTech for Financial Inclusion.

  65. A Strategy for Digital Financial Transformation. Kuala Lumpur: Alliance for Financial Inclusion; 2018 Sep. Available from: https://www.afi-global.org/publications/2844/FinTech-for-Financial-Inclusion-A-Framework-for-Digital-Financial-Transformation.

  66. We initially described finance as a data industry, but upon reflection this is not so—finance is only now slowly evolving into a data industry. Historically information resided in parts of a bank and was not even shared efficiently across the institution let alone analyzed and applied effectively.

  67. European Banking Authority. 2018. Report on the Prudential Risks and Opportunities Arising From FinTech. London: European Banking Authority; 2018 July 03. Available from: https://eba.europa.eu/documents/10180/2270909/Report+on+prudential+risks+and+opportunities+arising+for+institutions+from+FinTech.pdf.

  68. European Banking Authority. 2018. Report on the Impact of FinTech on the Incumbent Credit Institutions’ Business Model. London: European Banking Authority; 2018 July 06. Available from: https://eba.europa.eu/documents/10180/2270909/Report+on+the+impact+of+Fintech+on+incumbent+credit+institutions%27%20business+models.pdf.

Download references

Acknowledgements

We would like to thank for support of this research the Australian Research Council as part of the Project, ‘Regulating a Revolution: A New Regulatory Model for Digital Finance’ and the Hong Kong Research Grants Council Research Impact Fund, as well as participants at the European Banking Institute annual conference in Frankfurt in February 2019 for their comments and Rohan Balani, Pamela Cela, Tsany Ratna Dewi, Zak Vidor Staub, and Robin Veidt for their most helpful research assistance.

Author information

Authors and Affiliations

Authors

Corresponding author

Correspondence to Ross P. Buckley.

Additional information

Publisher's Note

Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.

This article draws upon a much longer piece of work addressing a wider range of issues, by the same authors, entitled ‘The Future of Data-driven Finance and RegTech: Lessons from EU Big Bang II’.

Rights and permissions

Reprints and permissions

About this article

Check for updates. Verify currency and authenticity via CrossMark

Cite this article

Buckley, R.P., Arner, D.W., Zetzsche, D.A. et al. The road to RegTech: the (astonishing) example of the European Union. J Bank Regul 21, 26–36 (2020). https://doi.org/10.1057/s41261-019-00104-1

Download citation

  • Published:

  • Issue Date:

  • DOI: https://doi.org/10.1057/s41261-019-00104-1

Keywords

JEL Classification

Navigation