FinTech, or financial technology, refers to the use of technology to improve and automate financial services. Governments around the world regulate FinTech companies in order to ensure the security, accessibility, and competition in the market, as well as to protect consumers from fraud, abuse, and predatory practices.
Let’s review five categories of regulation that may apply to a FinTech company:
Payment systems and services: Government regulation of payment systems and services, such as credit card networks, mobile payments, and online money transfer platforms, can impact the security, accessibility, and competition in the market.
Consumer protection: Governments may regulate financial technology companies to protect consumers from fraud, abuse, and predatory practices, such as through the implementation of strong customer authentication measures and disclosure requirements.
Data privacy and security: FinTech companies often collect and use large amounts of personal data, which can raise concerns about privacy and security. Governments may regulate the collection, storage, and use of this data to ensure that it is handled responsibly and in accordance with consumer protection laws.
Anti-money laundering and counter-terrorism financing: FinTech companies may be subject to regulations related to the prevention of money laundering and financing of terrorism, including requirements for verifying the identity of customers and reporting suspicious transactions.
Financial inclusion: Governments may seek to promote financial inclusion through the regulation of FinTech companies, such as by requiring that they offer services to underserved or disadvantaged populations or by promoting the use of digital financial tools in areas without access to traditional banking services.
Payment systems and services
Government regulation of payment systems and services, such as credit card networks, mobile payments, and online money transfer platforms, has played a crucial role in shaping the market and ensuring the security, accessibility, and competition of these systems. These regulations can take many forms, from requirements for strong customer authentication to rules around the processing of transactions and the handling of personal data.
One key piece of legislation that has had a significant impact on the regulation of payment systems and services is the Payment Card Industry Data Security Standard (PCI DSS). This standard, which was first introduced in 2004, establishes a set of requirements for companies that process, store, or transmit cardholder data to ensure the security of this data. The PCI DSS has been updated several times over the years to reflect changes in technology and the evolving threats to payment security, and it has become a widely recognized benchmark for payment security.
Another important piece of legislation that has had an impact on the regulation of payment systems and services is the EU’s Second Payment Services Directive (PSD2). This directive, which was introduced in 2015 and came into effect in 2018, aims to improve the security of online payments and to promote innovation in the payment industry. It includes a number of provisions related to strong customer authentication, the use of personal data, and the reporting of suspicious transactions.
In addition to the PCI DSS and PSD2, there are a number of other pieces of legislation and regulatory frameworks that have shaped the regulation of payment systems and services. For example, the Fair Credit Billing Act (FCBA) in the United States, which was passed in 1974, establishes a number of protections for consumers using credit cards, including the right to dispute fraudulent charges and the requirement for companies to provide written notice of any changes to the terms of a credit card account.
The regulation of payment systems and services has also been influenced by a number of historical events and trends. For example, the proliferation of online commerce and the increasing reliance on electronic payments has led to a need for stronger security measures to protect against fraud and other types of abuse. Similarly, the global financial crisis of the late 2000s and the subsequent regulatory reforms have had an impact on the regulation of payment systems and services, as governments have sought to increase the transparency and stability of these systems.
Overall, the regulation of payment systems and services has evolved significantly over the years to reflect changes in technology and the market, as well as the evolving needs and concerns of consumers. By ensuring the security, accessibility, and competition of these systems, governments around the world have helped to build trust and confidence in payment systems and services, and have also played a crucial role in protecting consumers from fraud, abuse, and predatory practices.
Consumer protection
Governments around the world have implemented a range of measures to protect consumers from risks, including through the implementation of strong customer authentication measures and disclosure requirements.
One key piece of legislation that has had a significant impact in this area is the PSD2. This directive aims to improve the security of online payments and to promote innovation in the payment industry. It includes a number of provisions related to strong customer authentication, the use of personal data, and the reporting of suspicious transactions.
Another important piece of legislation that has had an impact on consumer protection in the FinTech industry is the EU’s General Data Protection Regulation (GDPR). This regulation, which came into effect in 2018, establishes a set of rules for the collection, use, and protection of personal data. It requires companies to obtain explicit consent from consumers before collecting and using their personal data, and it also gives consumers the right to access, rectify, erase, or restrict the processing of their personal data.
In addition to the PSD2 and GDPR, there are a number of other pieces of legislation and regulatory frameworks that have shaped the regulation of FinTech companies to protect consumers. For example, the Dodd-Frank Wall Street Reform and Consumer Protection Act in the United States, which was passed in 2010, includes a number of provisions related to consumer protection, including the creation of the Consumer Financial Protection Bureau (CFPB), which has the authority to regulate and supervise financial companies to ensure that they are operating in a fair and transparent manner.
Data privacy and security
FinTech companies often collect and use large amounts of personal data as part of their operations, which can raise concerns about privacy and security. Governments around the world have implemented a range of regulations to ensure that this data is collected, stored, and used responsibly and in accordance with consumer protection laws.
One key piece of legislation that has had a significant impact in this area is the GDPR. This regulation establishes a set of rules for the collection, use, and protection of personal data. It requires companies to obtain explicit consent from consumers before collecting and using their personal data, and it also gives consumers the right to access, rectify, erase, or restrict the processing of their personal data.
Another important piece of legislation that has had an impact on the regulation of personal data in the FinTech industry is the California Consumer Privacy Act (CCPA). This act, which came into effect in 2020, gives California consumers the right to know what personal information is being collected about them, to request that this information be deleted, and to opt out of the sale of their personal information. It also requires companies to disclose certain information about their data collection and use practices, and it imposes fines for certain violations.
In addition to the GDPR and CCPA, there are a number of other pieces of legislation and regulatory frameworks that have shaped the regulation of personal data in the FinTech industry. For example, the Health Insurance Portability and Accountability Act (HIPAA) in the United States, which was passed in 1996, establishes a set of rules for the protection of personal health information. It requires companies that handle this type of information to implement certain safeguards and to report certain types of breaches.
The regulation of personal data in the FinTech industry is an important area that is likely to continue to evolve as the market and technology develop. By regulating the collection, storage, and use of personal data, governments can help to ensure that this data is handled responsibly and in accordance with consumer protection laws, and can also help to build trust and confidence in the FinTech industry.
Anti-money laundering and counter-terrorism financing
With the increasing popularity of FinTech companies, there has been growing concern about the potential for these companies to facilitate money laundering and financing of terrorism. As a result, FinTech companies are subject to a range of regulations aimed at preventing such activities.
One of the main pieces of legislation related to the prevention of money laundering and financing of terrorism in the FinTech industry is the Bank Secrecy Act (BSA) of 1970. The BSA requires financial institutions, including FinTech companies, to report suspicious activity and maintain records of certain financial transactions. In addition, the BSA established the Financial Crimes Enforcement Network (FinCEN), a bureau of the US Department of the Treasury, to collect and analyze these reports and other information related to financial crimes.
In 2002, the USA PATRIOT Act (Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act) was passed in response to the September 11th attacks. This act further strengthened the BSA by requiring financial institutions to implement policies, procedures, and controls to prevent money laundering and financing of terrorism. It also required FinTech companies to verify the identity of their customers and report suspicious transactions to FinCEN.
In addition to the BSA and the USA PATRIOT Act, FinTech companies may also be subject to regulations under other legislation, such as the Anti-Money Laundering Act of 2020 and the Combating Financing of Terrorism Act of 2020. These acts further enhance the requirements for financial institutions, including FinTech companies, to prevent money laundering and financing of terrorism by expanding the scope of covered activities, increasing the penalties for noncompliance, and requiring greater cooperation with law enforcement.
In order to comply with these regulations, FinTech companies are required to implement robust anti-money laundering (AML) and combating financing of terrorism (CFT) programs. These programs typically include the implementation of customer identification and verification procedures, the development of internal policies and procedures for reporting suspicious activity, and the establishment of systems for monitoring and detecting potential money laundering or financing of terrorism activities.
It is important for FinTech companies to be aware of and compliant with these regulations, as failure to do so can result in significant financial penalties and damage to their reputation. In recent years, there have been a number of high-profile cases involving FinTech companies that have been found to have violated money laundering and financing of terrorism regulations. For example, in 2019, a FinTech company based in the UK was fined £6.5 million ($8.5 million) by the Financial Conduct Authority (FCA) for failing to have adequate AML and CFT controls in place.
FinTech companies must implement robust AML and CFT programs and be aware of and compliant with these regulations in order to avoid financial penalties and damage to their reputation.
Financial Inclusion
Financial inclusion refers to the ability of individuals and businesses to access and use appropriate financial services and products. Governments around the world have recognized the importance of financial inclusion and have sought to promote it through a variety of means, including the regulation of FinTech companies.
One way in which governments may seek to promote financial inclusion through the regulation of FinTech companies is by requiring that they offer services to underserved or disadvantaged populations. For example, in 2014, the UK Financial Conduct Authority (FCA) introduced the Payment Services Directive (PSD2), which requires FinTech companies to offer certain services to underserved populations, such as those living in rural areas or those with disabilities. Similarly, in 2018, the US Consumer Financial Protection Bureau (CFPB) issued a rule requiring FinTech companies to serve underserved areas as a condition of obtaining a license to operate.
Another way in which governments may seek to promote financial inclusion through the regulation of FinTech companies is by promoting the use of digital financial tools in areas without access to traditional banking services. For example, in 2013, the Kenyan government introduced the M-Pesa mobile money platform, which allows individuals to transfer money and make payments using their mobile phones. This has helped to increase financial inclusion in Kenya, particularly in rural areas where access to traditional banking services is limited.
In addition to these regulatory measures, governments may also promote financial inclusion through the use of incentives and subsidies. For example, in 2016, the Indian government launched the Pradhan Mantri Jan Dhan Yojana (PMJDY) program, which provides incentives to banks and FinTech companies to offer financial services, including bank accounts, insurance, and credit, to underserved populations. The program has helped to increase financial inclusion in India, particularly in rural areas.
It is important for FinTech companies to be aware of and compliant with these regulatory requirements and incentives, as failure to do so can result in financial penalties and damage to their reputation. In addition, FinTech companies that are able to successfully serve underserved and disadvantaged populations may be able to build a strong customer base and differentiate themselves in a competitive market.
Conclusion
Governments regulate FinTech companies to ensure security, accessibility, competition in the market, and to protect consumers from fraud, abuse, and predatory practices.
There are five categories of regulation that may apply to a FinTech company:
- Payment systems and services regulations impact the security, accessibility, and competition of systems such as credit card networks, mobile payments, and online money transfer platforms.
- Consumer protection regulations protect consumers from fraud, abuse, and predatory practices through measures such as strong customer authentication and disclosure requirements.
- Data privacy and security regulations ensure that personal data collected and used by FinTech companies is handled responsibly and in accordance with consumer protection laws.
- Anti-money laundering and counter-terrorism financing regulations require FinTech companies to verify customer identity and report suspicious transactions.
- Financial inclusion regulations promote the use of FinTech services by underserved or disadvantaged populations or in areas without access to traditional banking services.
Spenser Baldwin 
Leave a comment