Commission amends 90-day exemption rules for account access under PSD2 SCA standards

Original title: Commission Delegated Regulation (EU) 2022/2360 of 3 August 2022 amending the regulatory technical standards laid down in Delegated Regulation (EU) 2018/389 as regards the 90-day exemption for account access (Text with EEA relevance)

Commission Delegated Regulation (EU) 2022/2360 entered into force on 25 December 2022, amending the regulatory technical standards on strong customer authentication and secure communication under PSD2. The regulation modifies the 90-day exemption rules for account access, which may affect payment service providers' compliance obligations regarding exemptions from SCA requirements. The amendment updates rules previously set in Delegated Regulation (EU) 2018/389.

What changed

• The Commission amended the 90-day exemption framework for account access in Delegated Regulation (EU) 2018/389 through a new delegated regulation that entered into force on 25 December 2022
• The regulation modifies exemption rules applicable to payment service providers under PSD2 strong customer authentication standards

Who is affected

Payment service providers operating in the EU under PSD2, particularly those providing account access services subject to the 90-day exemption rules

Summary generated by a language model; the official text prevails. Not legal advice.