Open Finance in the UAE is being built as a regulated, consent-based way for customers to share financial data and authorize certain actions through application programming interfaces (APIs). Under the Central Bank of the UAE (CBUAE) approach, licensed financial institutions (LFIs) and licensed third-party providers (TPPs) can securely exchange customer-permissioned information and initiate requests that can include payments, fund transfers, and investment orders. This moves the market away from the traditional model where each institution was the sole custodian of account and transaction information. For Abu Dhabi, the practical shift is clear: customers can connect a fragmented financial footprint across multiple providers without password sharing, screen-scraping, or manual PDFs, using structured, current data instead of static snapshots.
The UAE model also expands beyond classic open banking. Sources describe the scope as reaching beyond current and savings accounts into areas such as investments, mortgages, insurance, pensions, lending, and personal finance, with explicit, time-bound consent that can be revoked. A key differentiator is “service initiation,” described as allowing non-banking players to trigger financial services within their own environments, supporting embedded finance experiences such as digital lending or wealth management directly inside an app. This matters in Abu Dhabi because open finance is designed to connect regulated categories, not just a single bank interface, which can help a budgeting app display multiple accounts on one screen or help a lender retrieve transaction history for affordability checks through APIs.
What the CBUAE Rulebook Changes: Centralized Infrastructure, Mandatory Participation, and Standards
Regulatory timelines and infrastructure design are central to how the CBUAE framework reshapes the market. Open finance was mandated by the CBUAE in 2023 under Open Finance Regulation Circular 7 of 2023, updated by Circular 3 of 2025, with the Open Finance Regulation coming into force on 10 July 2025. The framework includes a centralized API hub, a trust framework for participant validation, and common infrastructural services designed for cross-sector data sharing and service initiation, including payment initiation, on behalf of customers. Pinsent Masons notes the hub is governed by a CBUAE spin-off entity, Nebras. Other sources emphasize that the UAE is taking a more centralized approach and requires CBUAE-licensed financial institutions to participate in the ecosystem through the relevant infrastructure, supported by open finance standards intended to make data exchange secure, standardized, and interoperable.
Implementation is also described as phased, based on CBUAE notifications. Participation is mandatory for regulated licensees for products and services brought within scope, while onboarding is phased. One guide states the first phase includes banks, foreign bank branches, and insurance companies, with later phases to be announced through official channels. For payments, the open finance ecosystem connects to national rails: sources cite Aani instant payments, operated by Al Etihad Payments, a CBUAE subsidiary. Governance is framed as CBUAE setting regulations, with AlTareq setting guidelines and standards for implementation, while compliance monitoring and customer-data protection are positioned as core outcomes, alongside increased control, transparency, and improved customer experience.
For Abu Dhabi fintechs and banks, the opportunity is to build products around consent, interoperability, and embedded journeys, while preparing for licensing and operational requirements. One source notes that Open Finance Services are expressly included as a licensed financial activity under the CBUAE framework following Federal Decree-Law No. 6 of 2025, described as strengthening the Central Bank’s authority across licensed financial institutions, financial activities, insurance business, payment services, emerging technology enabled financial services, and open finance. The ecosystem is also connected to broader policy guardrails: personal data handling is cited as sitting under the UAE PDPL, Federal Decree-Law 45/2021. In parallel, tested use cases are emerging, such as Project Aperta, completed in June 2026, which tested cross-border data portability and trade-finance lifecycle management as prototypes rather than immediate universal access.
What is Open Finance in the UAE, and how does it work in practice?
When did the CBUAE Open Finance Regulation take effect?
How does the UAE’s approach differ from typical open banking models?
Who must participate, and is onboarding immediate or phased?
How is the UAE open finance framework relevant for Abu Dhabi banks and fintechs?
