Open Banking in Canada: What It Means for Your Money (2026)

About nine million Canadians share their financial data by handing their online banking username and password to a third-party service, so it can log in and read their accounts. The federal government calls that screen scraping, and it wants the practice gone. The replacement is open banking, which Canada officially calls consumer-driven banking: a legal framework that lets you share specific banking data with an app you choose, for a set period, without ever giving away your login. It became law in March 2026 and the draft rules landed on June 27, 2026. It isn’t switched on yet.

So here’s where the framework really stands, what it changes for you, and how to judge a bank connection today, while the old way is still the one running.

What is open banking, and what does consumer-driven banking mean?

Open banking lets you share your banking data with an app you choose, securely and on your terms, without handing over your password. Canada’s version is called consumer-driven banking. Your bank sends the data straight to the app through a regulated connection, and you can shut that connection off whenever you want.

The rename wasn’t cosmetic. Ottawa picked “consumer-driven” to make a point about who is in charge: the data is yours, not the bank’s, and none of it moves unless you ask.

Right now the plumbing is informal. When you link an account to a budgeting app, a lender, or a savings app, a connection service does the work in the background. One long-standing method is screen scraping: you hand that service your banking username and password, it logs in as you, and it reads what’s on the screen. A well-built app never sees your login itself, but the practice still puts your password in someone’s hands. The Department of Finance is blunt about how that goes. In the draft regulations (opens in a new tab), it calls the practice “unregulated and technologically unsecure”, and says it leaves people “without recourse if something goes wrong”.

Open banking swaps that for an API: a direct, permissioned pipe from your bank to the app. Your bank confirms it’s really you, so no one needs your banking password at all.

Is open banking live in Canada yet?

No. The law is in place and the rules are drafted, but the system isn’t running. The Consumer-Driven Banking Act received royal assent in March 2026, and the draft regulations were published in the Canada Gazette on June 27, 2026 for a 60-day comment period. The Bank of Canada, which will supervise the framework, hasn’t set a launch date.

The Department of Finance (opens in a new tab) has said the rollout will be staggered, starting with accreditation of providers, with common rules and assessment fees following within a year of the final regulations. Treat the delay as a delay, not a cancellation. The law passed, the regulator is named, and the money is budgeted. What’s missing is a date.

What actually changes for you?

Four things. You stop sharing your password, you choose exactly what an app can see, you can revoke that access at any time for free, and there’s finally somebody to complain to. Access also expires on its own, because an app has to ask you to renew at least every 12 months.

That registry matters more than it sounds. Once the framework is live, you’ll be able to look up whether the app asking for your data is actually accredited, roughly the way you can check today whether a bank is a CDIC member.

Which banks have to take part?

Canada’s largest banks, and at first only them. The draft rules require participation from big banks above a retail-volume threshold. Everyone else, including credit unions, smaller federally regulated banks, and registered payment providers, can opt in once they meet the accreditation requirements.

Starting small is a deliberate choice, and it has a real consequence: on day one, the framework will reach fewer institutions than today’s connections already do. If you bank at a credit union or one of the online-only banks, your institution may well join in a later wave rather than at launch.

What can an app actually see?

Read access, and nothing more. The first phase covers viewing and sharing: your profile details, your balances and transactions, and product information across deposit, payment, investment, and lending accounts. An app can look. It can’t move a dollar.

Payment initiation, which is the power to actually push money out of your account, sits in a later phase and isn’t part of what’s being rolled out now. Data your bank has significantly enhanced for its own commercial purposes, which the rules call derived data, is excluded from the framework altogether, so a bank’s internal scoring of you doesn’t travel along with your transactions.

Read access sounds modest, and it covers almost everything a personal finance app needs. Budgeting, savings tracking, income verification, account aggregation: all of them are read-only jobs.

Is it safe to connect your bank to an app right now?

It can be, but the framework isn’t there to protect you yet, so the judgment is still yours to make. The question that matters most is what the app can do with the connection, not just who’s asking for it. Permission to read your balance is a far smaller thing to grant than the ability to move money. And plenty of apps already work the safer way open banking will make the rule: read-only access through a specialist service, where the app you signed up for never sees your login.

Four things worth checking before you connect an account:

• Does the app itself ever see your bank login? A good connection is handled by a specialist provider, so your credentials go to that provider and never to the company you’re signing up with.
• Is the access read-only? An app that only reads balances can’t withdraw, charge you, or send money anywhere. If a site won’t tell you plainly which kind of access it wants, that silence is its own answer.
• Can you disconnect? You should be able to cut access from inside the app, and from your bank’s own site.
• Is there a real company behind it? A named team, a Canadian address, and a privacy policy that says what’s collected and why.

How Lodavo fits in

Lodavo is a savings app that rewards you for saving, so it only ever needed one thing from your bank: permission to read a balance. Read-only is all it asks for, and all it has.

You link the bank you already use, through Plaid (opens in a new tab), a specialist bank-connection service. Lodavo never asks for or stores your banking login, and you can unlink it whenever you want, right from the app. From there, the more you set aside, the more free tickets you earn in the weekly draw, and you could win up to $10,000. If you want the longer version of the trust question, we wrote one on whether Lodavo is safe and legit.

Open banking won’t change what Lodavo does. It makes the connection underneath it a regulated one: an accredited provider, consent you can pull back whenever you like, and the Bank of Canada supervising the whole thing. For an app that only ever wanted to read a balance, that’s good news.

The bottom line

Open banking is a rare piece of financial plumbing that’s genuinely on your side. It won’t change your balance, and you probably won’t notice the day it arrives. What it does is take a connection that millions of Canadians already depend on and put rules, accountability, and an off switch behind it. Until that day, the safest connection is the smallest one: an app that reads only what it needs, and nothing else.

Want saving to feel like less of a chore? Download Lodavo free on the Apple App Store (opens in a new tab) or Google Play Store (opens in a new tab), link the bank you already have, and start earning tickets for the weekly draw.

Terms and conditions apply. No purchase necessary (alternate method of entry available). Skill-testing question required. Open to legal residents of Canada who are the age of majority. Odds depend on the number of eligible entries received. Full rules and odds at our contest rules.