FIDA: Rights & Duties in the FIDA Triangle | ALLES LEGAL #117

🎧What roles do data holders, data users and customers play in the era of Open Finance? In this new episode of Alles Legal – Fintech-Recht kompakt, Dana Wondra and Awet Yohannes take a close look at the Financial Data Access Regulation (FIDA). Tune in now!

Podcast: https://paymentandbanking.podigee.io/764-alles-legal-117-fida-rechte-pflichten-der-akteure-im-fida-dreieck/

Part 2 of the FIDA Series

This week, we continue our deep dive into FIDA. Host Dana Wondra from Payment & Banking is joined by Awet Yohannes, lawyer at Annerton, to explore access rights, data sovereignty and dashboards – and what FIDA means for financial market participants.

Understanding the FIDA Triangle

At the centre of the discussion is the FIDA Triangle, which outlines the relationship between data holders (e.g. banks), data users (e.g. fintechs) and customers, whose financial data is being accessed. FIDA makes one thing clear: data sovereignty lies with the users. They decide who can access their data, for how long, and for what purpose.

FIDA introduces clear obligations:
Data holders must provide interfaces, enable real-time access, and offer users a dashboard to manage their data permissions.
Data users must be authorised, use the data only for specific purposes, and delete it after use.

Compensation and the Big Tech Question

A key difference from PSD2 is FIDA’s introduction of compensation for data provision. This is designed to encourage greater participation in the Open Finance ecosystem. Meanwhile, access by Big Tech remains a highly debated issue.

More Than a Technical Rule

This episode makes one thing clear: FIDA is not just a technical framework – it marks a genuine paradigm shift in how financial data is handled.

About this podcast

Alles Legal – Fintech Recht Kompakt delivers sharp, weekly insights into legal and compliance matters in the world of banking. (in German only)
This podcast is a collaboration between Payment & Banking and PayTechLaw.
Each Wednesday, we unpack the legal developments shaping the financial world – clearly, concisely, and without the legal jargon.
Since 2021, PayTechLaw authors and Annerton attorneys have brought depth and clarity to complex topics.
Whether it’s PSD3, DORA, or FiDA – we provide the legal context you need.
In 20 minutes. No detours.



By continuing, you accept our privacy policy.
You May Also Like
MiCAR trifft PSD2: Warum E-Geld-Token plötzlich doppelt reguliert werden | ALLES LEGAL #138
Read More

MiCAR meets PSD2: Why e-money tokens are suddenly subject to dual regulation | ALLES LEGAL #138

Since the end of the EBA transitional period in March 2026, many crypto-asset service providers have had to assess whether, in addition to MiCAR, they also require a PSD2 or national payment services licence. In this episode, Kemal Ahmedi explains why crypto regulation and payment services law overlap and what this means for business models and licensing strategies.
Read More
MiCAR erklärt: Was die neue Krypto-Regulierung für Unternehmen verändert | ALLES LEGAL #137 MiCAR explained: How the new crypto regulation is changing the market | ALLES LEGAL #137
Read More

MiCAR explained: How the new crypto regulation is changing the market | ALLES LEGAL #137

With MiCAR, the EU is introducing its first harmonised regulatory framework for crypto-assets. In the latest episode of “Alles Legal – Fintech-Recht kompakt”, Kemal Ahmedi from Annerton explains which companies will require a MiCAR licence, why stablecoins are subject to stricter regulation and how the EU passport could reshape the European crypto market.
Read More
Datenschutz im Zahlungsverkehr – Rechtliche Grundlagen und Besonderheiten Data Protection in Payment Services – Legal Framework and Key Particularities
Read More

Data Protection in Payment Services – Legal Framework and Key Particularities

Data protection in payment services operates within the complex interplay of the GDPR, PSD2 and the German ZAG. A key challenge lies in the legal classification of payment data, as transaction data may reveal highly sensitive insights into individuals’ private lives. This article analyses the principal legal bases for data processing as well as the allocation of data protection responsibilities among payment service providers, PISPs and AISPs.
Read More