Plaid can very well not use the data in this way, but any company using Plaid's APIs and gaining access to the end-user bank account can do whatever they want with the data.
There are no restrictions on potential bad actors who will do this, and no consumer protections.
Sure, and that would be true however a partner collected this data. It’s true whenever you apply for a credit card or a mortgage.
I believe that Plaid doesn’t work with just anyone, and they do attempt to put some limited controls in place to block bad actors - just like any other platform in the world.
All that said, the parent were suggesting that Plaid itself bundled and resold data for marketing purposes which it does not do (though I believe some of its competitors might).
You should hold their feet to the fire for real issues (potential for misuse by companies that use Plaid to gather info, security concerns), not imaginary ones
Second Market tried to make this possible years ago. Now you have options like Forge (formerly Equidate) and Carta recently announced a product called CartaX which will be a market for shares of non-IPO companies.
The NACHA response is missing the forest for the trees. Securing the account data is great, but it's only a small piece of the puzzle.
It doesn't:
a) penalize ACH Originators responsible for submitting the fraudulent entry (beyond the recently implemented $4.50 charge)
b) do anything to promote alternative account numbers for EFTs, which in theory could be better protected as they won't be on paper checks
c) promote better validation tools to prevent the likes of Plaid and entities using their APIs from harvesting broad amounts of private consumer financial data
Everything is Securities Fraud.
https://www.google.com/search?q=matt+levine+everything+is+in...