Commission Delegated Regulation (EU) 2022/2360 amending RTS on 90-day exemption for account access

The European Commission amends Delegated Regulation (EU) 2018/389 to mandate the 90-day strong customer authentication exemption for account information accessed via account information service providers, replacing the previous optional regime. The regulation extends the authentication renewal period to 180 days for both direct access and access through third-party providers, while allowing payment service providers to enforce authentication for security reasons. Account servicing providers must publish interface technical specification changes at least two months before implementation, and the rules apply from 25 July 2023.

Get EC alerts — same-day email on every new publication.

EUR-Lex

Access to European Union law

This document is an excerpt from the EUR-Lex website

You are here

EUROPA

EUR-Lex home

Delegated regulation - 2022/2360 - EN - EUR-Lex

Help

Quick search

Use quotation marks to search for an "exact phrase". Append an asterisk ( * ) to a search term to find variations of it (transp * , 32019R * ). Use a question mark ( ? ) instead of a single character in your search term to find variations of it (ca ? e finds case, cane, care).

Search tips

Read the rest free, and get an email when EC publishes again

Email me when EC publishes something newOne email per publication, same day. Sign in below to keep reading.

Lineage: In force

amendssupersedesissued underrefers toproposed or not in RegAlertarrows run from the older text to the one that changes it

Timeline

This document amends: Commission Delegated Regulation (EU) 2018/389 of 27 November 2017 supplementing Directive (EU) 2015/2366 of the European Parliament and of the Council with regard to regulatory technical standards for strong customer authentication and common and secure open standards of communication (Text with EEA relevance. )

Source: European Commission — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works