Yes, it is. Everyone involved in Open Banking must comply with Data Protection Laws and will need to be approved by the Financial Conduct Authority (FCA).
No third party is permitted to take action on an account without the expressed permission of the account holder. This is a binding legal requirement placed on authorised third parties. Your information is protected and encrypted to the same level of security as Mettle.