Open Finance in Mexico: Between Market Expectations and the Need for Regulatory Certainty

By Miguel Gallardo Guerra

When discussing open finance in Mexico, the conversation inevitably revolves around both innovation and regulatory uncertainty. For several years now, the Mexican financial market has recognized the potential of models based on data sharing, interoperability, product customization, and increased competition. However, it is also true that the consolidation of a fully functional open finance ecosystem in Mexico depends largely on greater regulatory clarity and sufficiently precise operating rules for all participants, particularly regarding the effective implementation of the open finance model provided for in the Law to Regulate Financial Technology Institutions (Fintech Law).

The conversation about fintech regulation in Mexico is no longer limited to the authorization of specific entities or discussions about new digital models. Today, the focus is also on how the legal infrastructure will enable financial information to be shared, processed, and protected in a secure, efficient, and traceable manner. In this context, open finance should not be viewed merely as a technological trend, but rather as a structural evolution in the way information flows within the financial system.

One of the main challenges facing the Mexican market has been that the promise of open finance has coexisted for too long with a significant degree of regulatory uncertainty, stemming in part from the financial authorities’ partial and gradual issuance of secondary regulations. This has forced various companies to move forward using contractual arrangements, private integrations, and technological solutions that, while providing a certain degree of functionality, do not necessarily replace the advantages of a clearer overall framework. This situation generates implementation costs, legal uncertainty, and, in some cases, barriers to entry for players who are indeed in a position to innovate but cannot tolerate prolonged regulatory ambiguity.

From a legal perspective, the key issue is not merely to enable the exchange of information. It also involves defining more precisely the responsibilities of the various participants, the applicable security standards, data governance, consent mechanisms, and oversight criteria. In other words, the development of Open Finance Mexico 2026 depends not only on technology, but also on a coherent, coordinated, and enforceable regulatory framework.

Furthermore, as the financial sector becomes increasingly reliant on the strategic use of data, the discussion intersects with other equally sensitive issues: consumer protection, cybersecurity, fraud prevention, operational risk management, and data quality, as well as compliance with additional regulatory frameworks, such as personal data protection regulations. Therefore, the evolution of open finance should not be viewed in isolation, but rather as part of a broader agenda for modernizing the financial system.

For banks, fintech companies, payment institutions, aggregators, and technology providers, the current climate calls for a combination of caution and preparedness. Caution, because not every innovation should be rolled out without carefully assessing its regulatory basis. Preparedness, because players with stronger data governance policies, robust contracts, security controls, and documented internal processes will be better positioned to adapt as the applicable regulatory framework continues to evolve.

In this scenario, the true strategic value lies not in passively waiting for more detailed regulations to be enacted, but in anticipating their effects. Those who are currently working on responsible data models, operational traceability, and compliance by design will be better positioned to capitalize on market opportunities once greater certainty prevails. The debate over open finance in Mexico, therefore, is no longer whether it will arrive or not, but under what legal and operational conditions it will ultimately take hold, and how prepared participants will be to operate within that framework.