Regulatory Alerts2022-08-03
Added · Updated
Commission Delegated Regulation (EU) 2022/2360 amending RTS on 90-day exemption for account access
The European Commission amends Delegated Regulation (EU) 2018/389 to mandate the 90-day strong customer authentication exemption for account information accessed via account information service providers, replacing the previous optional regime. The regulation extends the authentication renewal period to 180 days for both direct access and access through third-party providers, while allowing payment service providers to enforce authentication for security reasons. Account servicing providers must publish interface technical specification changes at least two months before implementation, and the rules apply from 25 July 2023.
Topics
open-banking
Share