UK Open Banking Standard
What is UK Open Banking Standard?
The UK Open Banking Standard, established by the Competition and Markets Authority (CMA) Open Banking Order 2017, requires the nine largest UK banks (CMA9) to share customer data securely with authorised third-party providers (TPPs) via standardised APIs. Managed by the Open Banking Implementation Entity (OBIE), it enables Account Information Services (AIS) and Payment Initiation Services (PIS). It comprises 16 controls organised across 2 domains, and applies in the United Kingdom.
How UK Open Banking Standard maps to other frameworks
All 16 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 2 domains UK Open Banking Standard groups its controls into
Frameworks that share controls with UK Open Banking Standard
Each of these has at least one control mapped to a control in UK Open Banking Standard. The number is how many UK Open Banking Standard controls are shared, counted from the mapping graph.
SSAE 18 - Attestation Standards (SOC Reporting)
8 shared controlsO-RAN WG11 Security Specification
7 shared controlsFTC GLBA Safeguards Rule (16 CFR Part 314)
7 shared controlsNIST Privacy Framework
7 shared controlsPCI SSF
6 shared controlsTISAX - Trusted Information Security Assessment Exchange
6 shared controlsPSD2 SCA
6 shared controlsOSFI B-13
6 shared controlsWhere UK Open Banking Standard overlaps with the standards you already hold
Where to get trained on UK Open Banking Standard
One course in the catalogue covers UK Open Banking Standard directly. Each is self-paced, includes the downloadable toolkit and the implementation playbook, and carries a certificate of completion.
Training more than one person? Ten seats of any course is $1,490 on a single licence, against $199 a seat bought one at a time.
What an auditor will ask you for
All 25 UK Open Banking Standard controls, each with what it requires, the artefacts an auditor will ask you for, and where it commonly fails. Free to read, nothing to fill in.
Read the UK Open Banking Standard evidence request listWhat UK Open Banking Standard means in your sector
What UK Open Banking Standard means for your job
Questions people ask about UK Open Banking Standard
What is UK Open Banking Standard?
Where does UK Open Banking Standard apply?
How do I get started with UK Open Banking Standard compliance?
Query UK Open Banking Standard programmatically
UK Open Banking Standard, its 16 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
UK Open Banking Standard API reference and MCP config →What UK Open Banking Standard requires, control by control
Each page carries the requirement text for one UK Open Banking Standard control and what an assessor expects to see as evidence.
- OB-API-2 Open Data API Specification
- OB-API-4 MI Reporting Specification
- OB-CX-2 Granular Consent Management
- OB-CX-3 Strong Customer Authentication
- OB-DIR-1 Open Banking Directory
- OB-OPS-1 API Availability Requirements
- OB-OPS-2 Performance Standards
- OB-OPS-4 Incident Management
- OB-SEC-2 Transport Layer Security
- OB-SEC-4 Certificate Management
How ready are you for UK Open Banking Standard?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.