Severity: Medium Amendment EU Action required

Commission amends 90-day exemption rules for account access under PSD2 SCA standards

Original title: Commission Delegated Regulation (EU) 2022/2360 of 3 August 2022 amending the regulatory technical standards laid down in Delegated Regulation (EU) 2018/389 as regards the 90-day exemption for account access (Text with EEA relevance)

Published
Source: eur-lex.europa.eu
Effective
Deadline
Not stated
Framework: PSD2 SCA
PSD2 as amended by Regulation (EU) 2024/886 source
in 35 days
Indicative European Parliament plenary date for PSD3 and the Payment Services Regulation - a forecast, not a fixed date source

Why it matters

Commission Delegated Regulation (EU) 2022/2360 entered into force on 25 December 2022, amending the regulatory technical standards on strong customer authentication and secure communication under PSD2. The regulation modifies the 90-day exemption rules for account access, which may affect payment service providers' compliance obligations regarding exemptions from SCA requirements. The amendment updates rules previously set in Delegated Regulation (EU) 2018/389.

What changed

  • The Commission amended the 90-day exemption framework for account access in Delegated Regulation (EU) 2018/389 through a new delegated regulation that entered into force on 25 December 2022
  • The regulation modifies exemption rules applicable to payment service providers under PSD2 strong customer authentication standards

Who is affected

Payment service providers operating in the EU under PSD2, particularly those providing account access services subject to the 90-day exemption rules

What to do

AI-assisted summary of the official document; the official text prevails. Not legal advice.