On November 7, China passed data control laws that had been put on the table in August; the laws include government security checks on companies in finance, telecommunications and other critical data industries as well as mandatory in-country data storage; also, individuals will have to register with their real names on messaging services; businesses are concerned that information flow will be curtailed in industries where this is critical to be effective and corporate security checks have the potential to be invasive rather than simply regulatory; the law will go into effect next summer; some aspects of the law will need clarification over time from the government. Source
This American Banker op-ed on open banking discusses the progress that has been made in Europe, particularly the U.K., and...
The CFPB has laid out principles around the sharing of data between banks and fintechs; while the principles are non binding they are meant to provide guidance on the level of information sharing when a customer grants access to their banking details to a third party; there are still a few points of contention around screen scraping, informed consent and accountability when issues arise. Source.