BCB NORMATIVE INSTRUCTION NO. 136, OF JULY 29, 2021

Discloses operational limits and deadlines for the phased and efficient launch of interfaces dedicated to data sharing in Open Banking.

The Heads of the Department of Financial System Regulation (Denor), the Department of Information Technology (Deinf), and the Department of Banking Supervision (Desup), using the powers conferred upon them by Arts. 23, item I, letter "a", 62, item IV, 81, item VI, and 116, item I, letter "b", of the Internal Regulations of the Central Bank of Brazil, annexed to Ordinance No. 84,287, of February 27, 2015, based on Art. 2º, §§ 1º and 2º, of BCB Resolution No. 109, of June 24, 2021,

RESOLVE:

Art. 1º This Normative Instruction discloses operational limits and deadlines for the phased and efficient launch of interfaces dedicated to sharing between participating institutions specified in Art. 6 of Joint Resolution No. 1, of May 4, 2020, of data within the scope of Open Banking (APIs).

Sole Paragraph. The information regarding the limits and deadlines referred to in the caput must be available on the Open Banking page on the internet website of the Central Bank of Brazil and on the Open Banking Portal of Brazil, maintained by the Structure Responsible for the Governance of Open Banking referred to in Art. 44, § 1º, of Joint Resolution No. 1, of 2020.

Art. 2º Participating institutions must implement the phased and efficient launch of APIs for the purposes of sharing registration and transactional data referred to in Art. 5, item I, letters "c" and "d", items 1 to 5, of Joint Resolution No. 1, of 2020.

§ 1º The phased and efficient launch referred to in the caput must be carried out in four cycles, based on the following uniform deadlines and criteria, applicable to all participating institutions:

I - 1st cycle, to be carried out between August 13, 2021, and September 12, 2021:

a) availability of APIs and resources necessary for the creation, consultation, and revocation of consent, as well as for the sharing of registration data of clients and representatives;

b) limitation of the quantity of valid consents related to data sharing at the level of up to 0.1% of natural and legal persons, calculated from the client base of the data-transmitting institution; and

c) definition of an operating regime between 8:00 a.m. and 6:00 p.m., on business days, for data sharing;

II - 2nd cycle, to be carried out between September 13, 2021, and September 26, 2021:

a) availability of APIs for sharing client transaction data related to checking accounts, savings accounts, and prepaid accounts, in addition to those APIs and resources provided for in § 1º, item I, letter “a”;

b) limitation of the quantity of valid consents related to data sharing at the level of up to 0.5% of natural and legal persons, calculated from the client base of the data-transmitting institution; and

c) definition of an operating regime between 8:00 a.m. and 6:00 p.m., on business days, for data sharing;

III - 3rd cycle, to be carried out between September 27, 2021, and October 10, 2021:

a) availability of APIs for sharing client transaction data related to credit cards and credit operations, in addition to those APIs and resources provided for in § 1º, item II, letter “a”;

b) limitation of the quantity of valid consents related to data sharing at the level of up to 1% of natural and legal persons, calculated from the client base of the data-transmitting institution; and

c) definition of an operating regime for data sharing of:

1. 24 hours a day, on Thursdays and Fridays; and

2. between 8:00 a.m. and 6:00 p.m., on the other days of the week, including Saturdays and Sundays; and

IV - 4th Cycle, to be carried out between October 11, 2021, and October 24, 2021:

a) availability of all APIs and resources intended for sharing registration and transactional data referred to in the caput;

b) limitation of the quantity of valid consents related to data sharing at the level of up to 10% of natural and legal persons, calculated from the client base of the data-transmitting institution; and

c) observance of an operating regime of 24 hours, every day of the week, including Saturdays and Sundays, for data sharing.

§ 2º Throughout the period of phased and efficient launch referred to in § 1º, the making of interface calls exceeding the following is prohibited:

I - two interface calls per month, per participating institution, per client, and per method signature, regarding registration data referred to in Art. 5, item I, letter "c", of Joint Resolution No. 1, of 2020; and

II - one hundred and twenty interface calls per month, per participating institution and per client, regarding transaction data referred to in Art. 5, item I, letter "d", items 1 to 5, of Joint Resolution No. 1, of 2020.

§ 3º Data-transmitting institutions, at their discretion, provided that they observe the principles of Open Banking referred to in Art. 4 of Joint Resolution No. 1, of 2020, may:

I - define limits on the quantity of valid consents higher than those defined in letters “b” of items I to IV of § 1º; and

II - receive quantities of interface calls higher than those defined in § 2º.

§ 4º The limitations regarding the type of API, quantities of valid consents and interface calls, and operating regime provided for in §§ 1º to 3º will be suspended after the end of the 4th cycle referred to in item IV of § 1º.

§ 5º The Departments of Financial System Regulation (Denor), Information Technology (Deinf), and Banking Supervision (Desup) of the Central Bank of Brazil will monitor the process of phased and efficient launch referred to in the caput, and may adopt complementary measures to those provided for in this Normative Instruction.

Art. 3º BCB Normative Instruction No. 120, of June 25, 2021, is hereby revoked.

Art. 4º This Normative Instruction enters into force on the date of its publication.

João André Calvino Marques Pereira
Head of the Department of Financial System Regulation

Haroldo Jayme Martins Froes Cruz
Head of the Department of Information Technology

Belline Santana
Head of the Department of Banking Supervision