Response to consultation on Guidelines on major incidents reporting under PSD2

Go back

Question 1: Do you consider the definitions included in the draft Guidelines to be sufficiently clear?

We need further details /definitions/clarifications with regard to Transactions affected
In the reporting template proposed in Annex 1, at 'Payment services affected' section appear several categories of transactions.
- Please clarify if money remittance transactions affected by an incident which is outside of bank responsibility (the incident being registered on our partner application) should be included in the reporting.

Question 4: In particular, do you propose to add, amend and/or remove any of the thresholds referred to in Guideline 1.3? If so, please explain your reasoning.

We propose to amend the no of hours for reporting the major incidents from 2 hours to 4 hours from the moment the incident was detected and that's because this time should be correlated with the service downtime of 2 hours included as criteria for classifying an incident as major. There is a need for preparation and analysis of the incident after the 2 hours of downtime, before sending the initial report.

Question 6: Are the instructions provided along with the template sufficiently clear and helpful to remove any doubts that could arise when completing the required fields? If not, please explain your reasoning.

In regard to the instructions provided along with the template, we propose amending the details included at Clients affected. In this category should be taken into consideration only active clients, not passive too, because the last ones are not in fact affected by the incident having in view that they are not doing transactions and are not using the services for long time.

Name of organisation

Romanian Banking Association