Open Banking Question

iwaddo77

Hi, I use an app that users TrueLayer to create an Open Banking connection to Santander to retrieve balances and transactions. It works well.

The app requires me to re-link, reauthorise every 90-days. This works without issue.

The problem comes is that a new connection is created every time and the old connections do not expire. It states on Santander there is no expiry date set. Currently I have 14 old active connections between TrueLayer and Santander. I know I can delete them, but should I have to?

This feels like a security risk but I can't find who to ask. The open banking site does not seem to want to support end users. I have emailed the app provider and will try and contact Truelayer.

I was just wondering whether anyone on this forum had any experience in this area.

Thank you for your help. 

steven141

iwaddo77 said:

Hi, I use an app that users TrueLayer to create an Open Banking connection to Santander to retrieve balances and transactions. It works well.

The app requires me to re-link, reauthorise every 90-days. This works without issue.

The problem comes is that a new connection is created every time and the old connections do not expire. It states on Santander there is no expiry date set. Currently I have 14 old active connections between TrueLayer and Santander. I know I can delete them, but should I have to?

This feels like a security risk but I can't find who to ask. The open banking site does not seem to want to support end users. I have emailed the app provider and will try and contact Truelayer.

I was just wondering whether anyone on this forum had any experience in this area.

Thank you for your help. 

I’ve had this issue too with open banking. I just every so often delete the older connections manually but we shouldn’t have to do this. 

iwaddo77

Thank you. I will delete them but as you say we shouldn't have to. 

PRAISETHESUN

I also delete my old connections but my understanding is that even though they still appear on your online banking, if they are out of the 90 day consent period then they can't be used to share your data. They need active consent, which they won't have from old connections if you only initially approved 90 days

iwaddo77

Interestingly, I've noticed differences with the three connections I use.  I can see active connections and some that are clearly expired.  This maybe just a presentation issue.

The app provider asked for additional information and they have engaged with TrueLayer.

I've setup a task in my to-do app to delete the old ones after each 90-day reauthorisation. I am also trying to ascertain whether the need to reauthorise every 90-days comes from the app provider, TrueLayer or the Open Banking standard.

iwaddo77

Hi, just to update on this thread.

Santander have confirm this is a known issue which they expect to fix by the end of March. We should only have one active connection.

We will have to wait and see.