The Impact of Open Banking in Nordic Banks : Opportunities and Challenges in Finland, Norway and Sweden.

Abstract

The European Union's Revised Payment Services Directive (PSD2), which went into effect in January 2018, has significantly changed the financial services sector in the Nordic region, which includes Finland, Norway, and Sweden. The regulatory foundation of what is commonly referred to as "open banking" is PSD2, which requires banks to exchange customer-consented financial data with licensed third-party providers (TPPs) via safe Application Programming Interfaces (APIs). This thesis looks at the strategic, technological, and operational responses to this framework from five large Nordic banks: Nordea (Finland), DNB (Norway), and SEB, Swedbank, and Handelsbanken (Sweden).The study makes use of publicly accessible institutional documents, such as annual reports (2018–2024), developer portal publications, regulatory filings, and press communications, using a qualitative, constructivist-interpretivist research design that combines Thematic Content Analysis (TCA) and Cross-Country Comparative Analysis (CCCA). To reduce strategic communication bias, documents were chosen based on clear criteria of authority, importance, and recentness; coded using a hybrid deductive-inductive framework; and triangulated across several source types. Porter's (1985) Five Forces model, the Resource-Based View (Barney, 1991), dynamic capabilities theory (Teece et al., 1997), and open innovation theory (Chesbrough, 2003) are all incorporated into the theoretical framework. Together, these four frameworks function as a cohesive explanatory system that links the PSD2 regulatory shock through institutional resources and

capacities to the competitive challenges banks encounter and the strategic positions they take. Each framework offers a unique analytical viewpoint. The results show that the case banks have three different strategic stances. By using its API Market to generate over 50 million API requests each month and gain industry accolades for commercial breakthroughs like the Instant Reporting offering, Nordea has become the most proactive platform builder. In order to provide pan-Norwegian account aggregation, DNB has adopted an ecosystem-integration approach, co-investing €5.2 million in Nordic API Gateway. While Handelsbanken has maintained a compliance-first orientation reflecting its decentralized corporate culture, SEB and Swedbank have adopted cooperative approaches, taking part in the P27 pan-Nordic payments initiative and fintech partnerships (most notably Swedbank–Minna Technologies, generating 50 million SEK in customer savings). The study highlights enduring issues such as cybersecurity vulnerabilities brought about by increased API surfaces, regulatory fragmentation resulting from Norway's non-EU EEA status, and notable resource differences between large platform-oriented banks and smaller compliance-driven institutions. The study adds four things to the small body of comparative academic literature on Nordic Open Banking: it uses open innovation theory as a methodical explanatory lens for banking; it shows how DNB's strategic options are structurally constrained by the EU-EEA distinction; it offers an empirically supported typological classification of all five institutions; and it places findings within the emerging PSD3/PSR regulatory landscape that is anticipated to resolve many of the national-implementation inconsistencies found in this study.