Resolution BCB No. 32 — Establishes technical requirements and operational procedures for the implementation of Open Finance in Brazil

Resolution No. 32

RESOLUTION
BCB NO. 32, OF OCTOBER 29, 2020

Establishes the technical requirements and operational procedures for the implementation in the country of the Open Banking System (Open Banking).

Establishes the technical requirements and operational procedures for the implementation in the country of the Open Financial System (Open Finance). (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

Establishes the technical requirements and operational procedures for the implementation in the country of Open Finance. (Wording given by BCB Resolution No. 398, of 7/4/2024.)

The Collegiate Board of the Central Bank of Brazil, in a session held on October 29, 2020, based on art. 9 of Law No. 4.595, of December 31, 1964, art. 9, item II, of Law No. 12.865, of October 9, 2013, and art. 51, items I, II, and IX, of Joint Resolution No. 1, of May 4, 2020, and having in view the provisions of art. 1º-A of Circular No. 4.032, of June 23, 2020,

R E S O L V E :

CHAPTER I

OF THE OBJECT AND SCOPE OF APPLICATION

Art. 1º This Resolution establishes the technical requirements and operational procedures for the implementation in the country of the Open Banking System (Open Banking) to be observed by the participating institutions specified in art. 6 of Joint Resolution No. 1, of May 4, 2020.

Art. 1º This Resolution establishes the technical requirements and operational procedures for the implementation in the country of the Open Financial System (Open Finance) to be observed by the participating institutions specified in art. 6 of Joint Resolution No. 1, of May 4, 2020.(Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

Art.
1º This Resolution establishes the technical requirements and operational procedures for the implementation in the country of Open Finance to be observed by the participating institutions specified in art. 6 of Joint Resolution No. 1, of May 4, 2020. (Wording given by BCB Resolution No. 398, of 7/4/2024.)

Sole paragraph. The requirements and procedures referred to in the main text will be defined gradually according to the implementation deadlines set forth in art. 55 of Joint Resolution No. 1, of 2020.

Sole paragraph. (Revoked by BCB Resolution No. 398, of 7/4/2024.)

CHAPTER II

OF DEFINITIONS

Art. 2º For the purposes of the provisions of this Resolution, it is considered:

I - participation modality in Open Banking: each of the participation cases in Open Banking provided for in Joint Resolution No. 1, of 2020, namely:

I

• participation modality in Open Finance: each of the participation cases in Open Finance provided for in Joint Resolution No. 1, of 2020, namely: (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

a) institution transmitting and receiving data;

b) institution account holder;

c) institution providing payment transaction initiation service; and

c) institution providing payment transaction initiation service; (Wording given by BCB Resolution No. 526, of 12/3/2025)

d) institution that has entered into, as a contracting party, a correspondent contract in the country, whose object includes the service activity provided for in art. 8, item V, of Resolution No. 3.954, of February 24, 2011, by electronic means;

d) (Revoked by BCB Resolution No. 526, of 12/3/2025)

e) original creditor institution; and (Included by BCB Resolution No. 526, of 12/3/2025)

f) proposing institution;
(Included by BCB Resolution No. 526, of 12/3/2025)

II - participant directory: structure that manages the participant repository referred to in art. 44, item VI, of Joint Resolution No. 1, of 2020, responsible for managing the registration and credentials of participating institutions, as well as disclosing information related to participating institutions, among other activities that may be established by the Central Bank of Brazil; and

II - Application Programming Interface (API): interface dedicated to the sharing between participating institutions of data and services within the scope of Open Finance; and (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

III - Application
Programming Interface (API): interface dedicated to the sharing between participating institutions of data and services within the scope of Open Banking.

III

• participant directory: structure that manages the participant repository
  referred to in art. 44, item VI, of Joint Resolution No. 1, of 2020, responsible for managing registration, credentials, and information of participating institutions, as well as conducting compliance tests and the registration of APIs of participating institutions, among other activities that may be established by the Central Bank of Brazil. (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

CHAPTER III

OF THE DETAILING OF THE
TECHNICAL REQUIREMENTS AND OPERATIONAL PROCEDURES

Art. 3º The detailing of the technical requirements and operational procedures for the implementation of Open Banking will be provided in:

Art. 3º The detailing of the technical requirements and operational procedures for the implementation of Open Finance will be provided in: (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

I - Data and Services Scope Manual of Open Banking;

I - Data and Services Scope Manual of Open Finance; (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

II - APIs Manual of Open Banking;

II - APIs Manual of Open Finance; (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

III - Manual of Services Provided by the Structure Responsible for Open Banking Governance; and

III -
Manual of Services Provided by the Structure Responsible for Open Banking Governance; (Wording given by BCB Resolution No. 86, of 4/14/2021.)

III -
Manual of Services Provided by the Structure Responsible for Open Finance Governance; (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

III - Manual of Services Provided by the Open Finance Governance Structure; (Wording given by BCB Resolution No. 398, of 7/4/2024.)

IV - Security Manual of Open Banking.

IV - Security Manual of Open Banking; and (Wording given by BCB Resolution No. 86, of 4/14/2021.)

IV - Security Manual of Open Finance; and (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

IV - Security Manual of Open Finance; (Wording given by BCB Resolution No. 398, of 7/4/2024.)

V - Customer Experience Manual of Open Banking. (Included by BCB Resolution No. 86, of 4/14/2021.)

V - Customer Experience Manual of Open Finance~~~~. (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

V - Customer Experience Manual of Open Finance; and (Wording given by BCB Resolution No. 398, of 7/4/2024.)

VI - Monitoring Manual of Open Finance. (Included by BCB Resolution No. 398, of 7/4/2024.)

Sole paragraph. The manuals referred to in the main text will be prepared by the Central Bank of Brazil and kept updated on its internet website.

CHAPTER IV

OF DATA AND SERVICES SCOPE

Art. 4º The
Data and Services Scope Manual of Open Banking will detail the data and services subject to sharing within the scope of Open Banking, observing the minimum scope of data and services set forth in Circular No. 4.015, of May 4, 2020.

Art.
4º The Data and Services Scope Manual of Open Finance will detail the data and services subject to sharing within the scope of Open Finance, observing the minimum scope of data and services set forth in Circular No. 4.015, of May 4, 2020. (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

Art. 5º For the purposes of data sharing regarding service channels and regarding products and services referred to in art. 5, items I, letters "a" and "b", of Joint Resolution No. 1, of 2020, participating institutions must ensure public access to data kept permanently updated.

Art. 6º The sharing of the relative frequency distribution of the values of fees and interest rates charged to customers, referred to in § 2 of art. 3 of Circular No. 4.015, of 2020, must be based on four ranges of equal size, with explicit values on the median and the percentage of customers in each of these ranges, as well as the maximum and minimum values of the universe, segmented by natural and legal persons, as well as by type of service or operation modality and by indexer or reference, in the case of post-fixed operations.

§ 1º It is admitted that institutions share data related to the frequency distribution referred to in the main text on an updated basis on a monthly basis, published on the tenth business day of each month, starting from January 2021, referring to values charged to their customers in the previous month.

§ 2º The relative frequency distribution of interest rates published in accordance with § 1 must correspond to credit operations granted in the previous month.

Art. 6º-A For the purposes of sharing customer registration data and their representatives, as well as transactions, referred to in art. 5, item I, letters "c" and "d", of Joint Resolution No. 1, of 2020, the transmitting institution of data must inform the date and time of the last update of the shared data, as well as the date and time when the data sharing was effected. (Included by BCB Resolution No. 86, of 4/14/2021.)

Sole paragraph. Without prejudice of the regulation regarding the response time of each interface request, it is admitted that the data shared by the transmitting institution of the data may have a maximum lag relative to their availability in their electronic channels: (Included by BCB Resolution No. 86, of 4/14/2021.)

I - up to five minutes, with respect to data relating to the balance and transactions performed in an account for deposits or payments; and (Included by BCB Resolution No. 86, of 4/14/2021.)

II - up to one hour, for the remaining cases. (Included by BCB Resolution No. 86, of 4/14/2021.)

CHAPTER V

OF APIs

Art. 7º The
APIs Manual of Open Banking will establish standards for the development of APIs by participating institutions of Open Banking, in particular:

Art.
7º The APIs Manual of Open Finance will establish standards for the development of APIs by participating institutions of Open Finance, in particular: (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

I - the design of the APIs;

II - the protocols for data transmission;

III - the format for data exchange;

IV - the access controls to the APIs;

V - the versioning controls;

VI - the specification of parameters related to API unavailability, based on the minimum frequency of API availability every twenty-four hours and every three months;

VII - the specification of parameters related to the performance of data and service sharing request processes, based on the minimum response time to API calls; and

VIII - the limits of
API calls, based on minimum traffic limits for calls.

Art. 8º The participating institutions must make administrative APIs available dedicated exclusively to sharing with the directory referred to in art. 13, for the purposes of monitoring and disclosing information referred to in item IV of that article.

Art. 8º The participating institutions must make administrative APIs available dedicated exclusively to sharing with the directory referred to in art. 13, for the purposes of monitoring and disclosing information referred to in art. 15-B.(Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

Art.
8º For monitoring purposes, participating institutions must make administrative APIs available dedicated exclusively to sharing with the directory referred to in art. 13. (Wording given by BCB Resolution No. 398, of 7/4/2024.)

~~CHAPTER VI

OF PARTICIPATION
IN OPEN BANKING~~

CHAPTER VI

OF PARTICIPATION IN OPEN FINANCE

(Designation altered, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

Section I

Of the Registration of Participating Institutions

Art. 9º The institutions referred to in art. 1º must register their participation in Open Banking in the participant repository, through the participant directory referred to in art. 13.

Art. 9º The institutions referred to in art. 1º must register their participation in Open Finance in the participant repository, through the participant directory referred to in art. 13. (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

§ 1º The registration referred to in the main text must be observed:

§ 1º The registration of that refers to the main text must be observed: (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

I - by January 15 of 2021, by the mandatory participating institutions referred to in art. 6, items I, letter "a", II, letter “a”, and III, of Joint Resolution No. 1, of 2020; and

I - by the mandatory participating institutions referred to in art. 6, items I, letter "a", II, letter "a", and III, of Joint Resolution No.
1, of 2020, within ten business days counted from the date of their classification; (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

II - before the start of data sharing of the scope of Open Banking, by the voluntary participating institutions referred to in art. 6, item I, letter “b”, of Joint Resolution No. 1, of 2020.

II - before the start of data sharing of the scope of Open Finance, by the voluntary participating institutions referred to in art. 6, item I, letter "b", of Joint Resolution No. 1, of 2020; and (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

III - before the start of payment transaction initiation service, by payment transaction initiating institutions covered by art. 6, item II, letter "b", of Joint Resolution No. 1, of 2020. (Included, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

§ 2º Payment transaction initiating institutions covered by art. 6, item II, letter “b”, of Joint Resolution No. 1, of 2020, must provide the registration referred to in the main text within ten business days counted after the start of their activities.

§ 2º (Revoked, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

§ 3º The ten business day deadline referred to in § 2 must also be observed by institutions that may be classified in the cases of mandatory participation in Open Banking after January 15, 2021, counted from the date of their classification.

§ 3º (Revoked, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

Art. 10. The registration referred to in art. 9 must cover:

I - the registration of the institution and its representatives;

II - the provision of information by the institution on the participation modality(ies) in Open Banking; and

II - the provision of information by the institution on the participation modality(ies) in Open Finance; and (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

III - the adherence of the institution to the rights and obligations of the participant, as disclosed by the Structure Responsible for Open Banking Governance, referred to in art. 44, § 1, of Joint Resolution No. 1, of 2020.

III - the adherence of the institution to the rights and obligations of the participant, as disclosed by the Structure Responsible for Open Finance Governance, of that refers to art. 44, § 1, of Joint Resolution No. 1, of 2020. (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)

III - the adherence of the institution to the rights and obligations of the participant, as disclosed by the Open Finance Governance Structure, of that refers to art. 44, § 1, of Joint Resolution No. 1, of May 4,
2020. (Wording given by BCB Resolution No. 398, of 7/4/2024.)

§ 1º The document of participant rights and obligations referred to in item III of the main text must cover, among others, information on the contribution to the funding of the activities of maintenance of the Structure Responsible for Open Banking Governance, if such a system is approved by the Deliberative Council of that structure, in accordance with art. 15 of the Regulation Annexed to Circular No. 4.032, of June 23, 2020, and art. 45 of Joint Resolution No. 1, of 2020.

§ 1º The rights and obligations of the participant referred to in item III of the main text must cover, among others, aspects related to privacy and the use of data, to the handling and resolution of disputes within the scope of Open Banking, as well as the contribution to the funding of the activities of maintenance of the Structure Responsible for Open Banking Governance, if approved such a system by the Deliberative Council of that structure, in accordance with art. 15 of the Regulation Annexed to Circular No. 4.032, of June 23, 2020, and art. 45 of Joint Resolution No. 1, of 2020. (Wording given by BCB Resolution No. 86, of 4/14/2021.)

§ 1º The rights and obligations of the participant referred to in item III of the main text must cover, among others, aspects related to privacy and the use of data, to the handling and resolution of disputes within the scope of Open Finance, as well as the contribution to the funding of the activities of maintenance of the Structure Responsible for Open Finance Governance, if approved such a system by the Deliberative Council of that structure, in accordance with art. 15 of the Regulation Annexed to Circular No. 4.032, of June 23, 2020, and art. 45 of Joint Resolution No. 1, of 2020. (Wording given, from 1/4/2023, by BCB Resolution No. 294, of 2/23/2023.)~~

§ 1º The rights and obligations of the participant referred to in item III of the caput must include, among other aspects, issues related to privacy and the use of data, the handling and resolution of disputes within the scope of Open Finance, as well as the contribution to the funding of activities for maintaining the Open Finance Governance Structure. (Amended by Resolution BCB No. 398, of July 4, 2024.)

§ 2º The information referred to in items I and II of the caput must be kept permanently updated by participating institutions.

Art. 10-A. Institutions referred to in art. 1º that, exceptionally, are not able to comply, within the deadline provided in art. 9º, § 1º, item I, with the obligations for exercising the participation modalities in Open Finance shall prepare an adaptation plan. (Added, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

§ 1º The adaptation plan referred to in the caput must be signed by the Director responsible for Open Finance and submitted to the Central Bank of Brazil within the timeframe set forth in art. 9º, § 1º, item I. (Added, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

§ 2º The Central Bank of Brazil will evaluate the adaptation plan referred to in the caput, regarding which it may determine adjustments. (Added, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

§ 3º In evaluating the adaptation plan referred to in § 2º, the Central Bank of Brazil will assess, among other aspects, the compatibility between the complexity of the concrete situation and the deadline provided for the adaptation. (Added, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

§ 4º The execution of the adaptation plan referred to in the caput must be subject to monthly monitoring by the internal audit of the institutions, and the respective reports must be kept available to the Central Bank of Brazil. (Added, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

§ 5º If the adaptation plan referred to in the caput is not being fulfilled, the Central Bank of Brazil must be notified within two business days after the non-compliance is identified by the internal audit. (Added, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

§ 6º The procedures for forwarding the adaptation plan referred to in the caput to the Central Bank of Brazil, as per § 1º, and for communication in case of its non-compliance, as per § 5º, will be contained in a specific normative instruction. (Added, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

Section II
Cancellation of Registration of Participating Institution

Art. 11. The cancellation of the registration of a participating institution in the participants directory referred to in art. 13 is only admitted upon request by the Central Bank of Brazil, in the following cases:

I - decree of a resolution regime for the institution;

II - alteration of the corporate object that characterizes the non-provision of services related to the data provided for in art. 5º, items I, letter "d", and II, of Joint Resolution No. 1, of 2020;

III - if the institution ceases to maintain checking accounts and savings accounts and prepaid payment accounts for customers, in the case where its registration is exclusively in the account-holding modality; and

IV - others, at the discretion of the Central Bank of Brazil, with a view to preserving the adequate functioning of Open Banking.

IV - others, at the discretion of the Central Bank of Brazil, with a view to preserving the adequate functioning of Open Finance. (Amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

§ 1º Excluded from the provision of the caput is the voluntary exit of a participating institution referred to in art. 6º, item I, letter "b", of Joint Resolution No. 1, of 2020, provided that the institution communicates its withdrawal from Open Banking to the participants directory referred to in art. 13 at least one year before its effective implementation.

§ 1º Excluded from the provision of the caput is the voluntary exit of a participating institution referred to in art. 6º, item I, letter "b", of Joint Resolution No. 1, of 2020, provided that the institution communicates its withdrawal from Open Finance to the participants directory referred to in art. 13, at least one year before its effective implementation~~~~. (Amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

§ 1º Excluded from the provision of the caput is the voluntary exit of a participating institution referred to in art. 6º, caput, item I, letter "b", and item II, letter "b", of Joint Resolution No. 1, of May 4, 2020, provided that the institution communicates its withdrawal from Open Finance: (Amended by Resolution BCB No. 398, of July 4, 2024.)

I - to its clients who have active consent in Open Finance, at least thirty days before its effective implementation; and (Added by Resolution BCB No. 398, of July 4, 2024.)

II - to the participants directory referred to in art. 13, after fulfilling the period set forth in item I of § 1º. (Added by Resolution BCB No. 398, of July 4, 2024.)

§ 2º The communication referred to in § 1º must be kept available to the Central Bank of Brazil.

§ 2º The communication referred to in item II of § 1º must be kept available to the Central Bank of Brazil. (Amended by Resolution BCB No. 398, of July 4, 2024.)

§ 3º Prior consent of the Central Bank of Brazil is necessary for the exclusion of a certain registered modality by participating institutions in the participants directory in the case referred to in § 1º. (Added, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

§ 4º Voluntary participating institutions that do not possess active client consents in Open Finance are exempt from the prior communication referred to in item I of § 1º. (Added by Resolution BCB No. 398, of July 4, 2024.)

CHAPTER VII
SERVICES PROVIDED BY THE STRUCTURE RESPONSIBLE FOR GOVERNANCE

CHAPTER VII
SERVICES PROVIDED BY THE GOVERNANCE STRUCTURE

(Title amended by Resolution BCB No. 398, of July 4, 2024.)

Section I
Manual

Art. 12. The Manual of Services Provided by the Structure Responsible for the Governance of Open Banking shall establish the technical requirements and operational procedures for the implementation of:

Art. 12. The Manual of Services Provided by the Structure Responsible for the Governance of Open Finance shall establish the technical requirements and operational procedures for the implementation of: (Amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

Art. 12. The Manual of Services Provided by the Governance Structure of Open Finance shall establish the technical requirements and operational procedures for the implementation of: (Amended by Resolution BCB No. 398, of July 4, 2024.)

I - participants directory;

II - support channels for access to the directory and for forwarding requests to participating institutions; and

II - support channels for access to the directory and for forwarding requests to participating institutions; (Amended by Resolution BCB No. 86, of April 14, 2021.)

III - Open Banking portal in Brazil.

III - Open Banking portal in Brazil; and (Amended by Resolution BCB No. 86, of April 14, 2021.)

III - Open Banking portal in Brazil; (Amended by Resolution BCB No. 117, of July 21, 2021.)

III - Open Finance portal in Brazil; (Amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

IV - API testing environment.(Added by Resolution BCB No. 86, of April 14, 2021.)

IV - API testing environment; and (Amended by Resolution BCB No. 117, of July 21, 2021.)

V - Open Banking dispute resolution platform. (Added by Resolution BCB No. 117, of July 21, 2021.)

V - Open Finance dispute resolution platform. (Amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

Sole Paragraph. For the purposes of the provision in the caput, the manual shall establish, among other things, the detailing of parameters on unavailability and performance in the execution of the activities referred to in items I and II, based on criteria related to the frequency of API availability every twenty-four hours and every three months, response time to API calls, and attendance to requests, as applicable.

Sole Paragraph. For the purposes of the provision in the caput, the Manual shall establish, among other things, the detailing of parameters on unavailability and performance in the execution of the activities referred to in items I to IV, based on criteria related to the frequency of availability and response time to attendance to requests, as applicable.(Amended by Resolution BCB No. 86, of April 14, 2021.)

Sole Paragraph. For the purposes of the provision in the caput, the Manual shall establish, among other things, the detailing of parameters on service level agreements in the execution of the activities referred to in items I to V, as applicable. (Amended by Resolution BCB No. 117, of July 21, 2021.)

Section II
Participants Directory

Art. 13. The Structure Responsible for the Governance of Open Banking in the Country, referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020, shall include a participants directory with the following responsibilities:

Art. 13. The Structure Responsible for the Governance of Open Finance in the Country, referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020, shall include a participants directory with the following responsibilities:(Amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

Art. 13. The Governance Structure of Open Finance in the country, referred to in art. 44, § 1º, of Joint Resolution No. 1, of May 4, 2020, shall include a participants directory with the following responsibilities: (Amended by Resolution BCB No. 398, of July 4, 2024.)

I - management of registration and access to the directory by participating institutions and their representatives, observing the provisions of arts. 8º to 10;

I - management of identity and access to the directory by participating institutions and their representatives, observing the provisions of arts. 8º to 10; (Amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

II - management of identity and authorization of applications of participating institutions, which covers identification, authorization, and revocation of certificates used in sharing data and services within the scope of Open Banking, observing current regulation;

II - management of identity and authorization of applications of participating institutions, which covers identification, authorization, and revocation of certificates used in sharing data and services within the scope of Open Finance, observing current regulation; (Amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

III - management of directory information, which covers making available updated information of interest to participants and developers regarding technical standards, regulatory requirements, and other information necessary for the implementation of APIs; and

III - management of directory information, which covers making available updated information of interest to participants and developers regarding technical standards, regulatory requirements, and other information necessary for the implementation of APIs; (Amended by Resolution BCB No. 86, of April 14, 2021.)

III - management of directory information, which covers data regarding participants and modification history, as well as listing, by participant, of APIs and endpoints accessible to the public; and (Amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

IV - monitoring and dissemination of information on unavailability and performance of processes for requesting sharing of data and services within the scope of Open Banking.

IV - monitoring and dissemination of information on unavailability and performance of processes for requesting sharing of data and services within the scope of Open Banking; and (Amended by Resolution BCB No. 86, of April 14, 2021.)

IV - (Revoked, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

V - conducting conformity tests and registration of APIs of participating institutions. (Added by Resolution BCB No. 86, of April 14, 2021.)

Sole Paragraph. For the purposes of item I of the caput, the participants directory may obtain, from the Central Bank of Brazil, information regarding the condition of authorized operation of institutions that are in the process of registration in the directory in open data format, as established by the Central Bank of Brazil.

Section III
Support Channel for the Directory and Forwarding of Requests to Participating Institutions

Art. 14. The Structure Responsible for the Governance of Open Banking referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020, shall make available a free and uninterrupted customer service channel, available twenty-four hours a day and seven days a week, responsible for, at minimum:

Art. 14. The Structure Responsible for the Governance of Open Finance referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020, shall make available a free and uninterrupted customer service channel, available twenty-four hours a day and seven days a week, responsible for, at minimum:(Amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

Art. 14. The Governance Structure of Open Finance referred to in art. 44, § 1º, of Joint Resolution No. 1, of May 4, 2020, shall make available a free and uninterrupted customer service channel, available twenty-four hours a day and seven days a week, responsible for, at minimum: (Amended by Resolution BCB No. 398, of July 4, 2024.)

I - attend, register, instruct, analyze, and provide formal and adequate treatment to requests from participating institutions regarding the functioning of the directory; and

II - forward to participating institutions the requests received from clients, the public, and other participants regarding Open Banking, as per art. 35, item II, of Joint Resolution No. 1, of 2020.

II - forward to participating institutions the requests received from clients, the public, and other participants regarding Open Finance, as per art. 35, item II, of Joint Resolution No. 1, of 2020. (Amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

Sole Paragraph. The support channel referred to in the caput must ensure, at minimum:

I - identification of the received request through a protocol number, which must be provided to the requester; and

II - monitoring, providing clarifications, and sending notifications to requesters regarding the received requests.

Section IV
Portal of Open Banking in Brazil

Section IV
Portal of Open Finance in Brazil

(Title amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

Art. 15. The Structure Responsible for the Governance of Open Banking referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020, shall maintain an internet website to serve as the portal for Open Banking in Brazil, which provides, in a single environment, updated information about its activities, interface standards, including versioning, and other information related to the implementation of Open Banking, organized into specific areas intended for the following publics:

Art. 15. The Structure Responsible for the Governance of Open Finance referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020, shall maintain an internet website to serve as the portal for Open Finance in Brazil, which provides, in a single environment, updated information about its activities, interface standards, including versioning, and other information related to the implementation of Open Finance, organized into specific areas intended for the following publics:(Amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

Art. 15. The Governance Structure of Open Finance referred to in art. 44, § 1º, of Joint Resolution No. 1, of May 4, 2020, shall maintain an internet website to serve as the portal for Open Finance in Brazil, which provides, in a single environment, updated information about its activities, interface standards, including versioning, and other information related to the implementation of Open Finance, organized into specific areas intended for the following publics: (Amended by Resolution BCB No. 398, of July 4, 2024.)

I - financial institutions and other institutions authorized to operate by the Central Bank of Brazil;

II - developers; and

III - citizens.

§ 1º The information referred to in the caput must be compatible and appropriate to the profile of each public, through the use of guides, tutorials, and other techniques aimed at an easy and intuitive journey.

§ 2º The website referred to in the caput shall provide information on the unavailability and performance of the participants directory and the support channel for the directory and forwarding of requests to participating institutions, referred to in arts. 13 and 14, with the possibility of consulting consolidated or individualized information regarding each participating institution, as applicable.

§ 2º The website referred to in the caput shall provide: (Amended, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

I - information on the unavailability and performance of the participants directory and the support channel for the directory and forwarding of requests to participating institutions, referred to in arts. 13 and 14, with the possibility of consulting consolidated or individualized information regarding each participating institution, as applicable; and (Added, effective April 1, 2023, by Resolution BCB No. 294, of February 23, 2023.)

II - updated information of interest to participants and developers regarding technical standards, regulatory requirements, and other information necessary for the implementation of the APIs. (Included, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

Section V
On the API testing environment

Section V
On the API Testing Environment

(Name changed, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

Art. 15-A. The Structure Responsible for the Governance of Open Banking referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020, shall maintain an API testing environment that allows participating institutions:

Art. 15-A.
The Structure Responsible for the Governance of Open Finance referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020, shall maintain an API testing environment that allows participating institutions:(Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

Art.
15-A. The Open Finance Governance Structure referred to in art. 44, § 1º, of Joint Resolution No. 1, of May 4, 2020, shall maintain an API testing environment that allows participating institutions: (Wording given by BCB Resolution No. 398, of 7/4/2024.)

I - submit, still at the development stage, their implementations of the Open Banking APIs to automated functional and non-functional tests; and

I - submit, still at the development stage, their implementations of the Open Finance APIs to automated functional and non-functional tests; and (Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

I - submit to automated functional and non-functional tests, still at the development stage, their implementations of the Open Finance APIs and applicable security; and (Wording given by BCB Resolution No. 398, of 7/4/2024.)

II - access example implementations of the Open Banking APIs.

II - access example implementations of the
Open Finance APIs. (Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

§ 1º For the purposes of the provision in item I of the caput, participating institutions must respect the policies, rules, and deadlines established by the Open Finance Governance Structure, when there is no contrary regulatory provision. (Included by BCB Resolution No. 398, of 7/4/2024.)

§ 2º The tests cited in item I of the caput must also be performed outside of certification periods due to API versioning, prior to each publication performed in the production environment. (Included by BCB Resolution No. 398, of 7/4/2024.)

§ 3º Regarding the tests referred to in §
2º, participating institutions are exempt from executing them when the compliance engine does not exist or is not available for execution. (Included by BCB Resolution No. 398, of 7/4/2024.)

(Section V included by BCB Resolution No. 86, of 4/14/2021.)

Section VI
On the Monitoring of Open Finance Technology Services

(Section VI included, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

(Section VI revoked by BCB Resolution No. 398, of 7/4/2024.)

Art. 15-B.
The Structure Responsible for the Governance of Open Finance referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020, shall monitor and disclose information regarding the unavailability and performance of data and service sharing request processes within the scope of Open Finance.

Art.
15-B. (Revoked by
BCB Resolution No. 398, of 7/4/2024.)

CHAPTER VIII
OF STANDARDS, CERTIFICATES, AND OTHER SECURITY REQUIREMENTS

Art. 16. The Open Banking Security Manual shall detail:

Art. 16. The Open Finance Security Manual shall detail: (Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

I - the security standards and certificates that must be observed by financial institutions and other institutions authorized to operate by the Central Bank of Brazil for the sharing of data and services within the scope of Open Banking; and

I - the standards and certificates of security that must be observed by financial institutions and other institutions authorized to operate by the Central Bank of Brazil for the sharing of data and services within the scope of Open Finance; and (Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

II - the technical security requirements that must be observed by institutions in the APIs and in systems related to the implementation of Open Banking, in compatibility with current regulation.

II - the technical security requirements that must be observed by institutions in the APIs and in systems related to the implementation of Open Finance, in compatibility with current regulation. (Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

CHAPTER VIII-A
OF CUSTOMER EXPERIENCE

Art. 16-A. The Customer Experience Manual in Open Banking must contain:

Art. 16-A. The Customer Experience Manual in Open Finance must contain: (Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

I - the principles that should guide customer experience in the process of~~~~requesting sharing of data and services in Open Banking; and and

I - the principles that should guide customer experience in the process of requesting sharing of data and services in Open Finance; and (Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

II - the requirements of the customer experience guide, including its content and topic structure, with a view to harmonizing the consent, authentication, and confirmation steps among participating institutions in Open Banking.

II - the requirements of the customer experience guide, including its content and topic structure, with a view to harmonizing the consent, authentication, and confirmation steps among the participating institutions in Open Finance. (Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

Sole paragraph. The guide referred to in item II of the caput must:

I - cover the different possible use cases, including the situations provided for in art. 16-B;

I - cover the different possible use cases; (Wording given by BCB Resolution No. 398, of 7/4/2024.)

II - be prepared, reviewed, and periodically updated by the Structure Responsible for the Governance of Open Banking referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020; and

II - be prepared, reviewed, and periodically updated by the Structure Responsible for the Governance of Open Finance referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020; and (Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

II - be prepared, reviewed, and periodically updated by the Open Finance Governance Structure referred to in art. 44, § 1º, of Joint Resolution No. 1, of May 4, 2020; and (Wording given by BCB Resolution No. 398, of 7/4/2024.)

III - be made available, in its most updated version, to participating institutions and the general public, through the Open Banking Portal in Brazil, referred to in art. 15.

III - be made available, in its most updated version, to participating institutions and the general public, through the Portal of Open Finance in Brazil, referred to in art. 15. (Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

Art. 16-B. For the purposes of data sharing referred to in art. 5º, item I, letters "c" and "d", of Joint Resolution No. 1, of 2020, related to joint accounts of natural persons, the data-transmitting institution must:

I - ensure that the data-receiving institution has access to registration data only of the account holder responsible for the consent, with the sharing of registration data of the other account holders of the respective account not being permitted; and

II - share transactional data of the joint account through the consent of the holders who may have access to transactional information of the account.

Art. 16-B. (Revoked by
BCB Resolution No. 398, of 7/4/2024.)

Sole paragraph. The data-transmitting institution must require confirmation from all account holders to effectuate the sharing referred to in item II of the caput whenever access to transactional information of the account depends on the authorization of all holders.

Sole paragraph. (Revoked by
BCB Resolution No. 398, of 7/4/2024.)

Art. 16-C.
For the purposes of the provision in art. 28 of Joint Resolution No. 1, of 2020, it is considered as creating obstacles to data and service sharing in Open Banking the offering, by data-transmitting institutions and account-holding institutions, of products and services to the customer during the steps of the data and service sharing request process and the Open Banking payment transaction initiation service. (Included by BCB Resolution No. 117, of 7/21/2021.)

Art. 16-C. For the purposes of the provision in art. 28 of Joint Resolution No. 1, of 2020, it is considered as creating obstacles to data and service sharing in Open Finance the offering, by institutions data-transmitting and account-holding institutions, of products and services to the customer during the steps of the data sharing request process and the Open Finance payment transaction initiation service~~~~. (Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

Art. 16-C. (Revoked by
BCB Resolution No. 398, of 7/4/2024.)

(Chapter VIII-A included by BCB Resolution No. 86, of 4/14/2021.)

CHAPTER
VIII-B
OF THE DISPUTE RESOLUTION PLATFORM

Art. 16-D. The Structure Responsible for the Governance of Open Banking referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020, must maintain a platform for dispute resolution among participants within the scope of Open Banking.

Art. 16-D.
The Structure Responsible for the Governance of Open Finance referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020, must maintain a platform for dispute resolution among participants within the scope of Open Finance.(Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

Art. 16-D. The Open Finance Governance Structure referred to in art. 44, § 1º, of Joint Resolution No. 1, of May 4, 2020, must maintain a platform for dispute resolution among participants within the scope of Open Finance. (Wording given by BCB Resolution No. 398, of 7/4/2024.)

§ 1º The conditions for access by participants to resources of the platform referred to in the caput and to other resources possibly used to implement the dispute resolution mechanism established in accordance with art. 44, item IV, of Joint Resolution No. 1, of 2020, must be included in the regulation that provides for the said mechanism.

§ 2º The access of participants to the resources of the platform referred to in the caput and to other resources cited in § 1º must observe the confidentiality, integrity, and availability of the data and information systems used, as well as current legislation and regulation.

(Chapter VIII-B included by BCB Resolution No. 117, of 7/21/2021.)

CHAPTER VIII-C
OF MONITORING

Art. 16-E. The Open Finance Monitoring Manual must contain: (Included by BCB Resolution No. 398, of 7/4/2024.)

I - the following items to be monitored by the Open Finance Governance Structure: (Included by BCB Resolution No. 398, of 7/4/2024.)

a) performance and availability of APIs; (Included by BCB Resolution No. 398, of 7/4/2024.)

b) specifications, registrations, certification, and publication of APIs; (Included by BCB Resolution No. 398, of 7/4/2024.)

c) handling of incident resolution requests; (Included by BCB Resolution No. 398, of 7/4/2024.)

d) reporting of information; (Included by
BCB Resolution No. 398, of 7/4/2024.)

e) data quality; and (Included by
BCB Resolution No. 398, of 7/4/2024.)

e) data quality; (Wording given by
BCB Resolution No. 526, of 12/3/2025)

f) customer experience; (Included by
BCB Resolution No. 398, of 7/4/2024.)

f) customer experience; and (Wording given by BCB Resolution No. 526, of 12/3/2025)

g) steps, deadlines, and service level agreements regarding the credit operations portability service; (Included by BCB Resolution No. 526, of 12/3/2025)

II - the monitoring process to be observed by the Open Finance Governance Structure and by participating institutions; and (Included by BCB Resolution No. 398, of 7/4/2024.)

III - the provisions regarding the transparency of information about the monitoring of Open Finance within the scope of the Open Finance Governance Structure and for the general public. (Included by BCB Resolution No. 398, of 7/4/2024.)

(Chapter VIII-C included by BCB Resolution No. 398, of 7/4/2024.)

CHAPTER IX
OF PARTICIPATION IN DISCUSSIONS ON OPEN BANKING TECHNICAL STANDARDS

CHAPTER IX
OF PARTICIPATION IN DISCUSSIONS ON OPEN FINANCE TECHNICAL STANDARDS

(Name changed, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

Art. 17. The
Structure Responsible for the Governance of Open Banking referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020, through its technical level, shall maintain permanent discussion forums with experts and other stakeholders in the implementation in the Country of Open Banking that are not represented in the Technical Groups constituted at this level.

Art. 17. The Structure Responsible for the Governance of Open Finance referred to in art. 44, § 1º, of Joint Resolution No. 1, of 2020, through its technical level, shall maintain permanent discussion forums with experts and other stakeholders in the implementation in the Country of Open Finance that are not represented in the Technical Groups constituted at this level~~~~.(Wording given, effective 4/1/2023, by BCB Resolution No. 294, of 2/23/2023.)

Art.
17. The Open Finance Governance Structure referred to in art. 44, §
1º, of Joint Resolution No. 1, of May 4, 2020, through its technical level, shall maintain permanent discussion forums with experts and other stakeholders in the implementation in the country of Open Finance that are not represented in the technical groups constituted at this level. (Wording given by BCB Resolution No. 398, of 7/4/2024.)

CHAPTER X
GENERAL PROVISIONS

(Chapter X included by
BCB Resolution No. 398, of 7/4/2024.)

Art. 17-A. The
Open Finance Governance Structure must report and provide accountability to participating institutions regarding the services provided and the monitoring referred to in Chapters VII and VIII-C of this Resolution. (Included by BCB Resolution No. 398, of 7/4/2024.)

Art. 18. This
Resolution enters into force on the date of its publication.

Otávio
Ribeiro Damaso
Director of Regulation