Implementation of EBA Guidelines on Major Incident Reporting under PSD2 (EBA/GL/2017/10)

NOTICE

Implementation of the European Banking Authority's guidelines on the notification of major incidents under Directive (EU) 2015/2366 (PSD2) (EBA/GL/2017/10)

The Prudential Supervision and Resolution Authority has declared itself in conformity with the guidelines of the European Banking Authority (EBA/GL/2017/10) on the notification of major incidents under Directive (EU) 2015/2366 (PSD2).

These guidelines specify, in particular, the criteria for the classification of major operational or security incidents by payment service providers, as well as the format and procedures that these providers must apply to inform the Prudential Supervision and Resolution Authority and the Bank of France of such incidents, in accordance with the provisions of Article L. 521-10 of the Monetary and Financial Code.

These guidelines are applicable to payment service providers - credit institutions, payment institutions, and electronic money institutions - who must do everything in their power to comply with them, in accordance with the provisions of Article 16 of Regulation (EU) No 1093/2010 of the European Parliament and of the Council of 24 November 2010 establishing a European Supervisory Authority (European Banking Authority).

Incident notifications prepared using the model provided in Annex 1 of the guidelines must be sent to the Prudential Supervision and Resolution Authority and the Bank of France using the operational mode available on the websites of both authorities.

Download the notice and associated EBA guidelines

Implementation of the European Banking Authority's guidelines on... (PDF - 131.51 Ko)

Guidelines on the notification of major incidents under the... (PDF - 404.18 Ko)

Find the revised EBA guidelines of June 10, 2021

Revised EBA Guidelines on the notification of major incidents under PSD2 (EBA/GL/2021/03)

Updated on April 16, 2025