BigTech in Financial Services: Emerging Regulatory Considerations

Technical Notes and Manuals, July 13, 2026

Source details

Canonical URL: BigTech in Financial Services: Emerging Regulatory Considerations

Large technology firms (BigTech) are increasingly expanding into consumer-facing financial services, particularly payments, credit, insurance, asset management, and financial SuperApps.
While current financial stability implications remain limited in most jurisdictions, rapid growth—especially in emerging market and developing economies—raises new conduct, prudential, and systemic risks.
The Note analyzes BigTech business models, key activities, and associated risks, and assesses the adequacy of existing regulatory frameworks.
The Note discusses practical options for supervisors to: enhance risk identification; strengthen sector-based and group-wide supervision; expand the regulatory perimeter; improve data protection frameworks; and reinforce domestic and international coordination.
No global financial standards apply specifically to BigTech. Given the cross-border nature of BigTech activities, the Note argues that global standards should be developed to facilitate internationally consistent regulation and effective cross-border cooperation.

BigTech activity expansion is concentrated in: payments, credit, insurance, asset management, and financial SuperApps.
Financial stability implications are currently limited in most jurisdictions but could grow rapidly, particularly in emerging market and developing economies.
Existing regulatory frameworks may be inadequate for addressing conduct, prudential, and systemic risks posed by BigTech without targeted adjustments.

Conduct risks arising from consumer-facing financial products and platforms.
Prudential risks linked to rapid credit intermediation and balance sheet exposures.
Systemic risks associated with the scale, interconnectedness, and cross-border reach of BigTech platforms.
Data-related risks, including data protection and concentration of consumer financial data.

Current sector-based and group-wide supervisory approaches may not fully capture BigTech activities and risks.
There is an absence of global financial standards specific to BigTech, creating potential inconsistencies in cross-border supervision and cooperation.
Enhancing the regulatory perimeter is necessary to bring certain BigTech activities within financial regulation where they pose financial stability or consumer protection risks.

Enhance risk identification through improved data collection and monitoring of BigTech business models and activities.
Strengthen sector-based and group-wide supervision to capture risks transmitted across regulated and nonregulated entities within BigTech groups.
Expand the regulatory perimeter where warranted to include BigTech activities that perform financial intermediation or pose systemic risks.
Improve data protection frameworks to address concentration and misuse of consumer financial data.
Reinforce domestic coordination among regulators and agencies responsible for financial stability, competition, and data protection.
Reinforce international coordination and cooperation, and develop global standards specific to BigTech to enable consistent cross-border regulation and effective cross-border supervision.